A security consultant decides to use multiple layers of anti-virus defense, such as end user desktop anti- virus and E-mail gateway. This approach can be used to mitigate which kind of attack?

Forensic attack is not a standard offensive attack category; digital forensics refers to post-incident investigation and is not mitigated by anti-virus layering.

ARP spoofing is a network layer 2 attack that poisons ARP caches to intercept traffic, which anti-virus software cannot detect or prevent.

Social engineering attacks commonly use phishing emails with malicious attachments or links to trick users into executing malware. Placing anti-virus at the email gateway intercepts threats before delivery, while desktop anti-virus provides a second detection layer if anything slips through. This defense-in-depth strategy targets the malware delivery mechanism that social engineering attacks depend on.

Scanning attacks are network-level reconnaissance activities such as port scans; anti-virus software does not inspect or block network scanning.