Cyber Monday 2024! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Free Preparation Discussions
MENU
CertNexus Exam CFR-310 Topic 6 Question 38 Discussion
Actual exam question for
CertNexus's
CFR-310 exam
Question #: 38
Topic #: 6
[All CFR-310 Questions]
Topic #: 6
When tracing an attack to the point of origin, which of the following items is critical data to map layer 2 switching?
Suggested Answer:
B
The host that owns the IP address sends an ARP reply message with its physical address. Each host machine maintains a table, called ARP cache, used to convert MAC addresses to IP addresses. Since ARP is a stateless protocol, every time a host gets an ARP reply from another host, even though it has not sent an ARP request for that reply, it accepts that ARP entry and updates its ARP cache. The process of updating a target host's ARP cache with a forged entry is referred to as poisoning.
https://www.researchgate.net/publication/221056734_Securing_Layer_2_in_Local_Area_Networks
Currently there are no comments in this discussion, be the first to comment!