200-301 · Question #271
Which type of attack can be mitigated by dynamic ARP inspection?
The correct answer is D. man-in-the-middle. Dynamic ARP Inspection (DAI) mitigates man-in-the-middle attacks that exploit Address Resolution Protocol (ARP) by validating ARP packets to ensure IP-to-MAC address bindings are legitimate.
Question
Options
- Aworm
- Bmalware
- CDDoS
- Dman-in-the-middle
How the community answered
(35 responses)- A3% (1)
- B3% (1)
- C9% (3)
- D86% (30)
Why each option
Dynamic ARP Inspection (DAI) mitigates man-in-the-middle attacks that exploit Address Resolution Protocol (ARP) by validating ARP packets to ensure IP-to-MAC address bindings are legitimate.
Worms are self-propagating malicious software that exploits vulnerabilities to spread across networks; DAI does not directly mitigate worm propagation.
Malware is a broad category of malicious software; while DAI helps secure network communication, it is not a general malware prevention tool.
Distributed Denial of Service (DDoS) attacks overwhelm a target with traffic from multiple sources; DAI is not designed to prevent or mitigate DDoS attacks.
Dynamic ARP Inspection (DAI) prevents ARP spoofing, a common form of man-in-the-middle (MITM) attack, by intercepting, validating, and dropping ARP packets with invalid IP-to-MAC address bindings.
Concept tested: Dynamic ARP Inspection mitigation
Source: https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3560/software/release/12-2_55_se/configuration/guide/3560scg/swdhcp82.html#wp1097615
Topics
Community Discussion
No community discussion yet for this question.