QUESTION 1 Angst and Ettercap are active tools while Wireshark and Snort of passive tools. For security analyst O Wireshark and Snort are preferable because they passively capture packets and do not cause any interference with the network traffic O Ettercap and Angst are better because they participate in defense actively. O they are equally bad because they are attack tools and not defense tools. O they are equally good because they do the same thing actively or passively -capture packets and provide an analysis QUESTION 2 When 100000 machines are launching a DDoS simultaneously, chances are that these machines are O Owned by an enemy government O using Windows OS because it has most vulnerabilities O bots that are attacking a server O victims themselves, called zombies QUESTION 3 A port scanner can be used to (0) attack a network and (i) as a defense against an attack O this is not true because no one would like to scan their own ports Othis is true because while a port scanner attacks the other party's network it secures the attacker's own network by removing its footprints 0 this is true because testing your own ports for vulnerabilities is defense, and checking someone else's open ports is a stage of attack. 0 this is not true because a port scanner is neither a defense tool nor an attack tool it is a document scanning software QUESTION 4 When used for network defense visualization and monitoring tools are for