312-49v10 Exam QuestionsBrowse all questions from this exam

312-49v10 Exam - Question 163


Sniffers that place NICs in promiscuous mode work at what layer of the OSI model?

Show Answer
Correct Answer: D

Sniffers that place Network Interface Cards (NICs) in promiscuous mode capture all network traffic, allowing the NIC to intercept and process all data frames on the network segment, regardless of their destination MAC address. This functionality is associated with the Data Link layer of the OSI model, which is responsible for the transmission of data frames between devices on the same local network.

Discussion

8 comments
Sign in to comment
ctaregistroOption: D
Dec 11, 2021

D. Data Link https://www.sciencedirect.com/topics/computer-science/promiscuous-mode

ManzerOption: D
Mar 11, 2023

Sniffers that place NICs in promiscuous mode are designed to capture all network traffic, including packets not addressed to the NIC's MAC address. This is accomplished by allowing the NIC to capture all packets on the network segment, regardless of whether they are intended for the NIC's host system. Since this involves capturing and analyzing the data link layer packets, such sniffers work at the Data Link layer of the OSI model.

K3nz0420Option: D
Mar 10, 2022

D. data link layer

ElbOption: D
Jul 24, 2023

D: A NIC covers layers 1 and 2. Promiscuous mode is when the NIC ignores the destination MAC address which is part of layer 2.

torabi123Option: D
Nov 5, 2023

Sniffers that place Network Interface Cards (NICs) in promiscuous mode operate at the data link layer, which is Layer 2 of the OSI (Open Systems Interconnection) model. The data link layer is responsible for the transmission and reception of data frames within a local network. When a NIC is in promiscuous mode, it captures and processes all data frames on the network segment to which it is connected, regardless of whether the frames are intended for that specific NIC or not. This mode allows the sniffer to intercept and analyze network traffic, including Ethernet frames, without being restricted to only capturing the frames specifically addressed to its own MAC (Media Access Control) address. Promiscuous mode is often used in network monitoring and packet analysis tools, such as network analyzers and protocol analyzers, to capture and inspect network traffic for troubleshooting, security, and analysis purposes. It enables the collection of data at a lower network layer, which can be useful for diagnosing network issues, monitoring security, and examining network behavior. --> Data link

AspiringScriptKiddieOption: D
Mar 1, 2022

Only the physical NIC card can be considered layer 1. Once any protocols are put on it or a non physical tool is used to sniff, it would have to be layer 2 (data-link), right?

DumasOption: D
Jun 17, 2024

Network Cards are on the Data Link layer. D is the only answer.

ElbOption: C
Jun 13, 2024

A NIC covers layers 1 and 2. Promiscuous mode is when the NIC ignores the destination MAC address [ Layer 2 ] If ignored then is not using any upper layer so it is in layer 1.