CompTIA Network+ N10-006 Q75

A malicious user floods a switch with frames hoping to redirect traffic to the user’s server. Which of the following attacks is the user MOST likely using?

A. DNS poisoning
B. ARP poisoning
C. Reflection
D. SYN attack

Correct Answer: B
Section: Network security

Address Resolution Protocol poisoning (ARP poisoning) is a form of attack in which an attacker changes the Media Access Control (MAC) address and attacks an Ethernet LAN by changing the target computer’s ARP cache with a forged ARP request and reply packets. This modifies the layer -Ethernet MAC address into the hacker’s known MAC address to monitor it. Because the ARP replies are forged, the target computer unintentionally sends the frames to the hacker’s computer first instead of sending it to the original destination. As a result, both the user’s data and privacy are compromised.