Which Windows-based, free-to-download tool focused on password cracking with sniffers and ARP cache poisoning tools is described in the material?

• A. Nmap
• B. Wireshark
• C. Cain
• D. Metasploit

Answer: (C)

This item tests recognition of a Windows-based, free tool that combines password cracking with network sniffing capabilities and ARP cache poisoning for credential capture. Cain (often called Cain and Abel) is a Windows tool freely available that specializes in password recovery and cracking, and it includes built-in sniffing features along with the ability to perform ARP poisoning to place the attacker on the LAN for intercepting credentials. The other options serve different primary roles: Nmap is a network scanner, Wireshark is a packet analyzer, and Metasploit is an exploitation framework. They don’t focus on password cracking together with ARP-based MITM on Windows, so Cain is the best match for the described description.