An analyst wants to identify hosts that are connecting to the external FTP servers and what, if any, passwords are being used. Which of the following commands should the analyst use?
A) tcpdump -X dst port 21
B) ftp ftp.server -p 21
C) nmap -o ftp.server -p 21
D) telnet ftp.server 21

Question

Quizplus · Accepted Answer

The command "tcpdump -X dst port 21" captures and displays packets going to port 21, which is used by FTP, allowing the analyst to see the data being transmitted, including any passwords in plaintext.

An Analyst Wants to Identify Hosts That Are Connecting to the External