In network security, Sniffing refers to what activity?

In network security, Sniffing refers to what activity?

• A. Encrypting data in transit
• B. Listening and capturing packets to discover passwords
• C. Scanning devices for vulnerabilities
• D. Blocking suspicious traffic

Answer: (B)

Sniffing means listening in on network traffic and capturing the data packets as they travel across the network. It’s about eavesdropping on communications, and if those packets aren’t protected, sensitive information like passwords can be read from the captured data. Tools such as packet analyzers let you examine the contents of those packets and look for credentials or other secrets. Encrypting data in transit is the opposite action—protecting data so it cannot be easily read. Scanning devices for vulnerabilities is about finding weak points in systems, not listening to traffic. Blocking suspicious traffic is a defensive control that stops data from flowing; sniffing is the act of observing and capturing what’s moving. This concept is central to understanding why using secure protocols (like TLS/SSH) and proper network segmentation is important to prevent credential exposure.

Sniffing means listening in on network traffic and capturing the data packets as they travel across the network. It’s about eavesdropping on communications, and if those packets aren’t protected, sensitive information like passwords can be read from the captured data. Tools such as packet analyzers let you examine the contents of those packets and look for credentials or other secrets.

Encrypting data in transit is the opposite action—protecting data so it cannot be easily read. Scanning devices for vulnerabilities is about finding weak points in systems, not listening to traffic. Blocking suspicious traffic is a defensive control that stops data from flowing; sniffing is the act of observing and capturing what’s moving.

This concept is central to understanding why using secure protocols (like TLS/SSH) and proper network segmentation is important to prevent credential exposure.