Samantha was hired to perform an internal security test of XYZ. She quickly realized that all
networks are making use of switches instead of traditional hubs. This greatly limits her ability to
gather information through network sniffing.
Which of the following techniques can she use to gather information from the switched network or
to disable some of the traffic isolation features of the switch? (Choose two)

Ethereal works best on ____________.

The follows is an email header. What address is that of the true originator of the message?

Bob wants to prevent attackers from sniffing his passwords on the wired network. Which of the
following lists the best options?

Which tool/utility can help you extract the application layer data from each TCP connection from a
log file into separate files?

Which of the following display filters will you enable in Ethereal to view the three-way handshake
for a connection from host 192.168.0.1?

When Jason moves a file via NFS over the company’s network, you want to grab a copy of it by
sniffing. Which of the following tool accomplishes this?

Which of the following is not considered to be a part of active sniffing?

ARP poisoning is achieved in _____ steps

How would you describe a simple yet very effective mechanism for sending and receiving
unauthorized information or data between machines without alerting any firewalls and IDS’s on a
network?