Ethical › Module 8 › Lesson 5
Quiz — Sniffing
10 APPLY questions on scope and encryption.
Opening
Sniffing — Module Quiz
Ten APPLY items on the sentences this module refused to collapse: a sniffer is a reader of frames you are allowed to see (localhost or a network YOU own), not café Wi-Fi and not a roommate; cleartext HTTP volunteers the request line, headers, and body; TLS (Topic 8) hides the payload and is the real fix; metadata (IPs, ports, sizes, sometimes DNS/SNI names) can remain; ARP is a neighbor table, not a spoofing recipe — defenders notice poison by comparing a gateway MAC to a known-good, never by ettercap; a VPN moves which observer sees the path and does not replace end-to-end HTTPS; the authorized lab is python http.server bound to 127.0.0.1, curl http://, YOUR request line in $HOME/cyberlium-lab/ceh-sniff-lab.txt chmod 600. Wireshark on café Wi-Fi, tcpdump of a roommate, promiscuous capture of guests, ARP spoof, ettercap, fake CAs, and 0.0.0.0 teaching servers are all failing answers even when they look “more CEH.” This path is original Cyberlium teaching mapped to the CEH v13 sniffing domain — not official EC-Council training, not a certification, not exam dumps. Wrong answers still teach. Empty ethics lines fail. Next after this quiz is Why Humans Are the Channel: Module 9 talks social engineering as influence and verification, not as a pretext kit against strangers.
Knowledge Check
APPLY: A teammate opens Wireshark on café Wi-Fi, enables promiscuous mode, and wants to dump guests’ HTTP into Discord as “CEH sniffing.” What is a sniffer here, and what do you do?
Multiple choice
Knowledge Check
APPLY: True or False: If loopback is boring, the ethical homework is tcpdump of a roommate and Wireshark on hotel Wi-Fi because Module 8 is “sniffing.”
True or False
Knowledge Check
APPLY: curl http://127.0.0.1:8000 after python http.server you started prints "GET / HTTP/1.1" in the server log. What did you practice, and what is not required?
Multiple choice
Knowledge Check
APPLY: Why does this course call leftover HTTP a finding, and where must that observation live?
Multiple choice
Knowledge Check
APPLY: Select statements that match “ARP as a neighbor table, not a spoof kit.” (Select 2)
Select all that apply
Knowledge Check
APPLY: An allowed observer watches YOUR HTTPS session to a site you chose. What should they get, and what is the VPN’s job?
Multiple choice
Knowledge Check
APPLY: True or False: A green VPN icon replaces Topic 8 TLS, so you may skip HTTPS and capture café guests to prove the tunnel hides them.
True or False
Knowledge Check
APPLY: You finished the loopback lab. Which cleanup and note pairing is required before the quiz badge?
Multiple choice
Knowledge Check
APPLY: A blog titled with a cert acronym publishes “sniffing commands” aimed at café Wi-Fi, promiscuous mode, and arpspoof. What does Cyberlium Module 8 tell you?
Multiple choice
Knowledge Check
APPLY: You carry Module 8 into Module 9. Which pairing is true, and what opens after this quiz?
Multiple choice
Knowledge Check
APPLY: curl of http://192.168.0.1/ shows a home router login (TP-Link / Netgear / Huawei / "Router Admin"). Is that DEMO in scope as a hacking target?
Multiple choice
Answer all 11 knowledge checks to continue. (0/11 answered)