GIAC
GSEC · Question #394
GSEC Question #394: Real Exam Question with Answer & Explanation
The correct answer is A. ARP. ARP (Address Resolution Protocol) operates at Layer 2 of the OSI model and resolves IP addresses to MAC addresses, functioning analogously to ping but at the data link layer.
Question
Which of the following tools is similar to the ping tool but operates at OSI data link layer using the address resolution protocol?
Options
- AARP
- BNSLOOKUP
- CNETSTAT
- DTRACERT
Explanation
ARP (Address Resolution Protocol) operates at Layer 2 of the OSI model and resolves IP addresses to MAC addresses, functioning analogously to ping but at the data link layer.
Common mistakes.
- B. NSLOOKUP is a DNS query tool that operates at the application layer (Layer 7) and resolves hostnames to IP addresses, not MAC addresses.
- C. NETSTAT displays active network connections, routing tables, and interface statistics at the transport and network layers, and does not use ARP or operate at the data link layer.
- D. TRACERT traces the route packets take across multiple hops using ICMP or UDP at the network layer (Layer 3), not the data link layer.
Concept tested. ARP operation at OSI data link layer
Reference. https://learn.microsoft.com/en-us/windows-server/administration/windows-commands/arp
Community Discussion
No community discussion yet for this question.