CISSP · Question #944
A post-implementation review has identified that the Voice Over Internet Protocol (VoIP) system was designed to have gratuitous Address Resolution Protocol (ARP) disabled. Why did the network architec
The correct answer is D. Gratuitous ARP requires the risk of a Man-in-the-Middle (MITM) attack.. Gratuitous ARP is a special type of ARP message that a sender device broadcasts on the network without any other device requesting it. It can be useful for updating the ARP table, changing the address of an interface, or informing the network of the sender's own MAC address. Howe
Question
Options
- AGratuitous ARP requires the use of Virtual Local Area Network (VLAN) 1.
- BGratuitous ARP requires the use of insecure layer 3 protocols.
- CGratuitous ARP requires the likelihood of a successful brute-force attack on the phone.
- DGratuitous ARP requires the risk of a Man-in-the-Middle (MITM) attack.
How the community answered
(26 responses)- A15% (4)
- B4% (1)
- C23% (6)
- D58% (15)
Explanation
Gratuitous ARP is a special type of ARP message that a sender device broadcasts on the network without any other device requesting it. It can be useful for updating the ARP table, changing the address of an interface, or informing the network of the sender's own MAC address. However, it also introduces the risk of a Man-in-the-Middle (MITM) attack, where an attacker can send a spoofed gratuitous ARP message to trick other devices into associating a legitimate IP address with a malicious MAC address. This way, the attacker can intercept, modify, or redirect the traffic intended for the legitimate device. Therefore, the network architect likely designed the VoIP system with gratuitous ARP disabled to prevent such attacks and ensure the security and integrity of the voice communication.
Topics
Community Discussion
No community discussion yet for this question.