ECSA v10: EC-Council Certified Security Analyst v10

Question

Identify the attack described below:

I. User A sends an ARP request to a switch.

II. The switch broadcasts the ARP request across the network.

III. An attacker eavesdrops on the ARP request and replies while spoofing a legitimate user.

IV. The attacker sends their MAC address to User A.

Explanation

ARP poisoning uses a forged ARP reply to associate the attacker's MAC address with the IP address or identity of a legitimate device. The victim can consequently place the attacker's MAC address in its ARP cache and send traffic intended for the legitimate device to the attacker.

Learn more

Cisco: Preventing ARP Spoofing and Flood Attack

ECSA v10: EC-Council Certified Security Analyst v10

AstroTutor

Notes

Readiness

QuestionQ106

Community Discussion