Question

Jason is a junior system administrator for a small firm of 50 employees. For the last week a few users have been complaining of losing connectivity intermittently with no suspect behavior on their part such as large downloads or intensive processes. Jason runs Wireshark on Monday morning to investigate. He sees a large amount of ARP broadcasts being sent at a fairly constant rate. What is Jason most likely seeing?

Answer 1

The correct answer is A) ARP poisoning.

Jason is a junior system administrator for a small firm of 50 employees. For the last week, a few users have been complaining of losing connectivity intermittently with no suspect behavior on their parts such as large downloads or intensive processes. Jason runs Wireshark on Monday morning to investigate. He sees a large amount of ARP broadcasts being sent at a fairly constant rate. Jason is most likely seeing an ARP poisoning.

ARP stands for Address Resolution Protocol. ARP poisoning is a type of attack. The attacker changes the MAC, which means Media Access Control address and also the aggressor attacks the Ethernet LAN when it changes the target's computer ARC cache with a falsified ARP request and reply packets. This kind of attack is also known as ARP cache poisoning.  

The other options of the question were B) ARP caching, C) ARP spoofing, and D) DNS spoofing.