SY0-701: CompTIA Security+

By CompTIA · Question Mode

QuestionQ7

Threats, Vulnerabilities, and Mitigations

During a school district's state testing, a security analyst finds that all internet services are unavailable. The analyst determines that ARP poisoning is taking place on the network and terminates the host's access. Which of the following is the most likely source of this malicious activity?

Explanation

ARP poisoning can be launched with widely available tools to disrupt or intercept local network traffic, making an unskilled attacker the most likely source when no evidence indicates insider access, shadow IT, or nation-state involvement.

Community Discussion

No comments yet. Be the first to start the discussion!