GSLC: GIAC Security LeadershipDemo

Question

Which network attack type links an attacker’s MAC address to the IP address of a legitimate computer or server on the network?

A VLAN hopping
B Double tagging
C ARP spoofing
D DHCP snooping

Explanation

ARP spoofing uses forged ARP messages to create a false IP-to-MAC address binding, causing traffic intended for a legitimate device to be directed to the attacker. Cisco documents ARP spoofing as forged ARP responses that poison ARP caches with attacker-controlled MAC/IP bindings.

Learn more

Cisco: Preventing ARP Spoofing and Flood Attack

GSLC: GIAC Security LeadershipDemo

AstroTutor

Notes

Readiness

QuestionQ71

Community Discussion