Deck 4: Sniffers

Question 1

The three types of sniffer are bundled, commercial, and free.

Answer 1

True

Question 2

Sniffers look only at the traffic passing through the network interface adapter on the machine where the application is resident.

Answer 2

True

Question 3

Information traveling across a network is typically in human-readable format.

Answer 3

False

Question 4

When you transmit information in a data packet to a computer on a network, the request is sent to every computer on that network that uses the same Ethernet cable or wireless LAN.

Question 5

Snort logs packets only into the American Standard Code for Information Interchange (ASCII) format.

Question 6

____ comes bundled with Windows. Network Monitor, a component of Microsoft Systems Management Server (SMS), enables you to detect and troubleshoot problems on LANs,WANs, and serial links running the Microsoft Remote Access Server (RAS).

A)Tcpdump
B)Network Monitor
C)Ethereal
D)Wireshark

Question 7

____ is bundled with the Solaris operating systems. It captures packets from the network and displays their contents.

A)Tcpdump
B)nettl
C)netfmt
D)Snoop

Question 8

The ____ captures the network traffic from the Ethernet connection.

A)capture driver
B)buffer
C)decoder
D)packet analysis

Question 9

Previously known as Ethereal, ____ is probably the best-known and most powerful free network protocol analyzer for UNIX/Linux and Windows.

A)Tcpdump
B)Snort
C)Wireshark
D)Nessus

Question 10

____, the most commonly bundled sniffer with Linux distros, is also widely used as a free network diagnostic and analytic tool for UNIX and UNIX-like operating systems.

A)Snort
B)Wireshark
C)Ethereal
D)Tcpdump

Question 11

____________________ is an application that monitors, filters, and captures data packets transferred over a network.

Question 12

When a sniffer captures data from a network, it stores the data in a(n) ____________________-a dynamic area of RAM that holds specified data.

Question 13

In order to identify a particular computer on a network, computers are assigned a unique identifier called a(n) ______________________________ address.

Question 14

A NIC can be set up to retrieve any data packet being transferred throughout the Ethernet network segment. This mode is known as _________________________.

Question 15

______________________________ is based on the principle that distance can be measured by computing the time required for reflected energy to be measured at the source.

Question 16

What are the main characteristics of commercial sniffers?

Question 17

What are the major differences between commercial sniffers and free sniffers?

Question 18

What are the network interfaces supported by TCP/IP?