Computer Hacking Forensic Investigator (CHFI v10) — Question 17

Sniffers that place NICs in promiscuous mode work at what layer of the OSI model?

Answer options

• A. Network
• B. Transport
• C. Physical
• D. Data Link

Correct answer: D

Explanation

The correct answer is D, as the Data Link layer is responsible for node-to-node data transfer and includes the functionality of NICs. Options A and B are incorrect because they refer to higher layers that do not deal with the hardware specifics of NIC operation. Option C is also incorrect as the Physical layer deals with the transmission of raw bitstreams rather than data packet handling.