Certified Ethical Hacker (CEH v10) — Question 192

A pen-tester is configuring a Windows laptop for a test. In setting up Wireshark, what river and library are required to allow the NIC to work in promiscuous mode?

Answer options

• A. Winprom
• B. Libpcap
• C. Winpsw
• D. Winpcap

Correct answer: D

Explanation

Winpcap is the correct choice as it is specifically designed to allow packet capturing in promiscuous mode on Windows systems. Winprom and Winpsw are not recognized components for this purpose, and while Libpcap is important, it is mainly relevant to Unix-like systems rather than directly applicable to Windows without Winpcap.