LPI
117-303 · Question #69
An administrator is capturing traffic with Wireshark and is only seeing ARP traffic. What is the most likely cause of this?
The correct answer is B. The machine is on a switched network and is therefore only seeing local and. See the full explanation below for the reasoning.
Question
An administrator is capturing traffic with Wireshark and is only seeing ARP traffic. What is the most likely cause of this?
Options
- AThe network interface on which the scan is running is not in promiscuous mode.
- BThe machine is on a switched network and is therefore only seeing local and
- CThe administrator did not enable the TCP and UDP options when starting the scan.
- DThe network interface on which the scan is running has the ARP_ONLY flag set.
How the community answered
(23 responses)- A4% (1)
- B74% (17)
- C13% (3)
- D9% (2)
Community Discussion
No community discussion yet for this question.