A penetration tester is connected to a client's local network and wants to passively identify cleartext protocols and potentially sensitive data being communicated across the network. Which of the following is the BEST approach to take?
A) Run a network vulnerability scan.
B) Run a stress test.
C) Run an MITM attack.
D) Run a port scan.

Question

Quizplus · Accepted Answer

A Man-In-The-Middle (MITM) attack allows the tester to intercept and analyze network traffic, identifying cleartext protocols and sensitive data without actively sending packets or altering the network state.

A Penetration Tester Is Connected to a Client's Local Network