312-49 Question #58: Real Exam Question with Answer & Explanation

The correct answer is A: C:\arp -a. The command 'arp -a' displays the current ARP (Address Resolution Protocol) cache on a Windows system, listing all IP-to-MAC address mappings the machine has resolved and cached. This is invaluable in network forensics for identifying which physical devices (by MAC address) were

Submitted by certguy· Apr 18, 2026Network Forensics

Question

The ARP table of a router comes in handy for Investigating network attacks, as the table contains IP addresses associated with the respective MAC addresses. The ARP table can be accessed using the __________command in Windows 7.

Options

AC:\arp -a
BC:\arp -d
CC:\arp -s
DC:\arp -b

Explanation

The command 'arp -a' displays the current ARP (Address Resolution Protocol) cache on a Windows system, listing all IP-to-MAC address mappings the machine has resolved and cached. This is invaluable in network forensics for identifying which physical devices (by MAC address) were communicating with which IP addresses. The other switches serve different functions: 'arp -d' deletes an entry from the ARP cache, 'arp -s' manually adds a static entry to the ARP cache, and 'arp -b' is not a valid ARP switch in Windows.

Topics

#ARP Table#Command Line Interface#Networking Commands#Network Attack Investigation

Community Discussion

No community discussion yet for this question.

Full 312-49 Practice Browse All 312-49 Questions