Exam N10-008 topic 1 question 367 discussion

ARP spoofing is a technique used in network attacks where an attacker sends falsified Address Resolution Protocol (ARP) messages over a local area network to link an attacker's MAC address with the IP address of a legitimate computer or server on the network. This allows the attacker to intercept network traffic meant for that legitimate computer or server, redirecting it to their own device to carry out various attacks. This is often part of an on-path attack where the attacker attempts to intercept and manipulate the network traffic between two endpoints.

ARP Spoofing ARP spoofing, or ARP cache poisoning, is a common means of perpetrating an on-path attack. It works by broadcasting unsolicited ARP reply packets, also known as gratuitous ARP replies, with a source address that spoofs a legitimate host or router interface. Because ARP has no security, all devices in the same broadcast domain as the rogue host trust this communication and update their MAC:IP address cache table with the spoofed address. Because the threat actor broadcasts endless ARP replies, it overwhelms the legitimate interface.

select c

A. an on-path attack.

Used in Denial of Service attacks. Should be C