CompTIA CySA+ (CS0-003) — Question 128

An analyst suspects cleartext passwords are being sent over the network. Which of the following tools would best support the analyst's investigation?

Answer options

• A. OpenVAS
• B. Angry IP Scanner
• C. Wireshark
• D. Maltego

Correct answer: C

Explanation

Wireshark is a network protocol analyzer that allows the user to capture and inspect packets on the network, making it ideal for identifying cleartext password transmissions. OpenVAS is a vulnerability scanner, Angry IP Scanner is used for network scanning, and Maltego is focused on link analysis and data mining, none of which are specifically designed for monitoring network traffic for password security.