nerdexam
EC-Council

312-50V12 · Question #64

You are using a public Wi-Fi network inside a coffee shop. Before surfing the web, you use your VPN to prevent intruders from sniffing your traffic. If you did not have a VPN, how would you identify w

The correct answer is A. You should check your ARP table and see if there is one IP address with two different MAC. ARP spoofing is a type of attack where an attacker sends fake ARP (Address Resolution Protocol) messages to associate their MAC address with the IP address of another host on the network. This allows the attacker to intercept and modify traffic intended for the victim. By checkin

Submitted by chiamaka_o· Mar 4, 2026Network and Perimeter Hacking

Question

You are using a public Wi-Fi network inside a coffee shop. Before surfing the web, you use your VPN to prevent intruders from sniffing your traffic. If you did not have a VPN, how would you identify whether someone is performing an ARP spoofing attack on your laptop?

Options

  • AYou should check your ARP table and see if there is one IP address with two different MAC
  • BYou should scan the network using Nmap to check the MAC addresses of all the hosts and look
  • CYou should use netstat to check for any suspicious connections with another IP address within
  • DYou cannot identify such an attack and must use a VPN to protect your traffic.

How the community answered

(20 responses)
  • A
    70% (14)
  • B
    5% (1)
  • C
    15% (3)
  • D
    10% (2)

Explanation

ARP spoofing is a type of attack where an attacker sends fake ARP (Address Resolution Protocol) messages to associate their MAC address with the IP address of another host on the network. This allows the attacker to intercept and modify traffic intended for the victim. By checking the ARP table on your laptop, you can see if there is any IP address with two different MAC addresses, which would indicate an ARP spoofing attack is in progress.

Topics

#ARP spoofing detection#ARP table#Man-in-the-middle attacks#Network forensics

Community Discussion

No community discussion yet for this question.

Full 312-50V12 Practice