CompTIA PenTest+ PT0-002 Practice Question

The correct answer is Monitoring and capturing network traffic. Sniffing is a technique that involves monitoring the network traffic flowing through a network, which can include capturing data packets to analyze their content for information gathering purposes. This is a key process during a penetration test to understand the network and identify potential vulnerabilities or data leakage. Decrypting SSL/TLS traffic is not the primary purpose, it's a separate process that can sometimes be associated with captured traffic if appropriate keys are available. Injecting traffic into the network relates to actions typically performed during active attacks or specific testing procedures, not passive information gathering like sniffing. Broadcasting service set identifiers (SSIDs) is part of wireless network operations, not a function of network sniffing.