Welcome to ExamTopics
ExamTopics Logo
- Expert Verified, Online, Free.

Unlimited Access

Get Unlimited Contributor Access to the all ExamTopics Exams!
Take advantage of PDF Files for 1000+ Exams along with community discussions and pass IT Certification Exams Easily.

Exam CFR-310 topic 1 question 21 discussion

Actual exam question from CertNexus's CFR-310
Question #: 21
Topic #: 1
[All CFR-310 Questions]

An administrator believes that a system on VLAN 12 is Address Resolution Protocol (ARP) poisoning clients on the network. The administrator attaches a system to VLAN 12 and uses Wireshark to capture traffic. After reviewing the capture file, the administrator finds no evidence of ARP poisoning. Which of the following actions should the administrator take next?

  • A. Clear the ARP cache on their system.
  • B. Enable port mirroring on the switch.
  • C. Filter Wireshark to only show ARP traffic.
  • D. Configure the network adapter to promiscuous mode.
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Wutan
7 months, 3 weeks ago
Selected Answer: B
The answer is B. Enable port mirroring on the switch. In this case, the administrator believes that a system on VLAN 12 is ARP poisoning clients on the network. However, they did not find any evidence of ARP poisoning after reviewing the capture file. This could be because the ARP poisoning is happening on a different port on the switch. By enabling port mirroring on the switch, the administrator can capture all traffic on VLAN 12, including ARP traffic, and look for evidence of ARP poisoning.
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...