SY0-501 · Question #501
An external attacker can modify the ARP cache of an internal computer. Which of the following types of attacks is described?
The correct answer is B. Spoofing. The described scenario, where an external attacker modifies the ARP cache of an internal computer, is characteristic of a spoofing attack.
Question
An external attacker can modify the ARP cache of an internal computer. Which of the following types of attacks is described?
Options
- AReplay
- BSpoofing
- CDNS poisoning
- DClient-side attack
How the community answered
(62 responses)- A15% (9)
- B74% (46)
- C3% (2)
- D8% (5)
Why each option
The described scenario, where an external attacker modifies the ARP cache of an internal computer, is characteristic of a spoofing attack.
A replay attack involves an attacker capturing valid data transmissions and maliciously retransmitting them to gain unauthorized access or achieve a fraudulent outcome, rather than modifying network cache entries.
Spoofing, specifically ARP spoofing or ARP poisoning, involves an attacker sending forged Address Resolution Protocol (ARP) messages onto a local area network. This manipulation allows the attacker to associate their MAC address with the IP address of another legitimate device, thereby modifying the ARP cache of other hosts and allowing the interception or redirection of traffic.
DNS poisoning involves an attacker injecting forged DNS record entries into a DNS resolver's cache, redirecting traffic for legitimate websites to malicious ones, which is distinct from manipulating the ARP cache.
A client-side attack exploits vulnerabilities in client-side applications or software (e.g., web browsers) to compromise the client system, not directly the manipulation of network protocol caches like ARP.
Concept tested: ARP spoofing and network attack types
Source: https://www.cisco.com/c/en/us/products/security/what-is-arp-poisoning.html
Topics
Community Discussion
No community discussion yet for this question.