CompTIA PenTest+ (PT0-001) — Question 102

During an internal penetration test, several multicast and broadcast name resolution requests are observed traversing the network. Which of the following tools could be used to impersonate network resources and collect authentication requests?

Answer options

• A. Ettercap
• B. Tcpdump
• C. Responder
• D. Medusa

Correct answer: C

Explanation

Responder is specifically designed to capture and respond to name resolution requests, making it effective for impersonating network resources and collecting authentication credentials. Ettercap is primarily used for man-in-the-middle attacks; Tcpdump is a packet capture tool with no impersonation capabilities; and Medusa is a password cracking tool, not related to impersonation in this context.