Exit GCIH GIAC Certified Incident Handler (GCIH)
Question 5 of 5
0% complete
Q5 Single choice

Why do protocol parsers such as sniffers often run with root or system privileges?

  • A

    So they can attach to port numbers higher than 1024 on Unix systems

  • B

    So they can scan open files for application data

  • C

    So they can run with application-level functionality

  • D

    So they can run the network card in promiscuous mode

Previous Save & finish