GCIH · Question #456
The penetration testing team is attempting to intercept DNS queries and poison the ARP cache of the Windows host at the IP address of 192.168.10.205. Their testing platform has the IP address of 192.1
The correct answer is D. The routers that are segmenting the networks are not allowing ARP packets to pass.. The networks described in the image are segmented into four groups. Routers will not pass ARP packets between these separate networks. The diagram is an example of segmented network design and each subnet will be responsible for their range of IP addresses and ARP table resolutio
Question
The penetration testing team is attempting to intercept DNS queries and poison the ARP cache of the Windows host at the IP address of 192.168.10.205. Their testing platform has the IP address of 192.168.10.88. Their tests are unsuccessful in redirecting the traffic from the target. By consulting the information below and the network topology image, which of the following explains the failure? Subnet 1 192.168.10.0-63 /26 Subnet 2 192.168.10.64-127 /26 Subnet 3 192.168.10.128-191 /26 Subnet 4 192.168.10.192-255 /26
Exhibit
Options
- AThe DNS server is on a separate network, which is not accessible to the penetration testers.
- BThe firewall at 192.168.10.1 is blocking all DNS packets between subnets.
- CThe IPS system is detecting malicious traffic and is blocking all Layer 3 protocols.
- DThe routers that are segmenting the networks are not allowing ARP packets to pass.
How the community answered
(49 responses)- A6% (3)
- B10% (5)
- C22% (11)
- D61% (30)
Explanation
The networks described in the image are segmented into four groups. Routers will not pass ARP packets between these separate networks. The diagram is an example of segmented network design and each subnet will be responsible for their range of IP addresses and ARP table resolution. The ARP packets will not be allowed past the router connecting the pen test station to the rest of the network.
Topics
Community Discussion
No community discussion yet for this question.