Computer Hacking Forensic Investigator (CHFI) — Question 119

Sniffers that place NICs in promiscuous mode work at what layer of the OSI model?

Answer options

• A. Network
• B. Transport
• C. Physical
• D. Data Link

Correct answer: C

Explanation

The correct answer is C, as promiscuous mode allows the Network Interface Card (NIC) to capture all packets on the network segment, which is associated with the Data Link layer. Options A and B are incorrect because they refer to higher layers of the OSI model that deal with routing and transport, while option D is also incorrect as it refers to the Data Link layer where the NIC operates, but the question asks for the layer affected by sniffers specifically.