GIAC Certified Forensic Analyst (GCFA) — Question 7

You are the Network Administrator and your company has recently implemented encryption for all emails. You want to check to make sure that the email packages are being encrypted. What tool would you use to accomplish this?

Answer options

• A. Password cracker
• B. Packet sniffer
• C. Performance Monitor
• D. Vulnerability analyzer

Correct answer: B

Explanation

The correct answer is B, as a Packet sniffer can capture and analyze network traffic, allowing you to check if the email packets are encrypted. A Password cracker is used for breaking passwords, Performance Monitor tracks system performance metrics, and a Vulnerability analyzer identifies security weaknesses, none of which directly assess email encryption.