GCIH: GIAC Certified Incident HandlerDemo

By GIAC · Question Mode

QuestionQ762

Endpoint Attack and Pivoting

How can a system be set up to disregard gratuitous ARPs for particular IP addresses?

  • A Use static routing to avoid ARP cache poisoning attacks
  • B Hard code the ARP table for specific IP addresses
  • C Use the "arp -deny" command
  • D Use DNS, which operates at the application layer, instead of ARP, which operates at the data link layer
Explanation

Static ARP entries bind specified IP addresses to fixed MAC addresses, so gratuitous ARP announcements cannot alter those mappings in the ARP cache.

Community Discussion

No comments yet. Be the first to start the discussion!