Ace Your Exams with Our Notes and Mock Tests!

EC-Council: Computer Hacking Forensic Investigator(CHFI-V10)
Module 8 : Network Forensics
Questions available : 133		You are not logged in. Please Login for track your learning progress

Q. No: 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 |
		Go to Question No.

Question No 0

---

If you want to share the link of this question, please click here to "Copy Question Link" and share that generated link. Link from URL may change in future.

 

---

Bookmark this Question		QID: 143
During the course of his investigation, Vincent came across a situation where he needs to run a packet sniffing tool on a Linux-based machine to monitor the network traffic. Which tool should Vincent choose in this case?
A:    Tcpdump
B:    Balbuzard
C:    CurrPorts
D:    DumpIt
Explanation: Sniffing Tool: Tcpdump Tcpdump prints out a description of the contents of packets on a network interface that match an input Boolean expression. Balbuzard: Investigators can use tools such as Balbuzard, Cryptam Malware Document Detection Suite, etc. to extract patterns of investigative interest from malicious files. CurrPorts: CurrPorts is network monitoring software that displays the list of all currently opened TCP/IP and UDP ports on your local computer DumpIt: DumpIt is a fusion of two trusted tools, win32dd and win64dd, combined into one one executable. DumpIt will take the snapshot of the host’s physical memory and save it to the folder where the DumpIt executable was located.