Exam SY0-601 topic 1 question 776 discussion

Actual exam question from CompTIA's SY0-601

Question #: 776
Topic #: 1

A security administrator is reviewing reports about suspicious network activity occurring on a subnet. Users on the network report that connectivity to various websites is intermittent. The administrator logs in to a workstation and reviews the following command output:

Which of the following best describes what is occurring on the network?

A. ARP poisoning
B. On-path attack
C. URL redirection
D. IP address conflicts

Show Suggested Answer

Suggested Answer: A 🗳️

by johnabayot at Jan. 14, 2024, 3:22 p.m.

Comments

Submit Cancel

Hs1208

Highly Voted 1 year, 5 months ago

Selected Answer: A

A. ARP poisoning The provided command output shows ARP (Address Resolution Protocol) entries, and the irregularities in the entries, such as mismatched MAC addresses and incomplete entries, suggest the occurrence of ARP poisoning

upvoted 6 times

...

johnabayot

Highly Voted 1 year, 5 months ago

Selected Answer: A

The best answer is A. ARP poisoning. This is a type of attack where an attacker sends false ARP messages to a network to associate their own MAC address with the IP addresses of other devices. This allolws the attacker to intercept, modify, or block the network traffic intended for those devices. The command output shows the same MAC address is associated with multiple IP addresses on the network, which is a sign of ARP poisoning. The attacker is likely using the this techinque to perform a man-in-the-middle attack and disrupt the network connectivity of the users.

upvoted 6 times

...

shady23

Most Recent 1 year, 2 months ago

Selected Answer: A

A. ARP poisoning

upvoted 1 times

...

MortG7

1 year, 2 months ago

ARP poisoning.. 192.168.1.8 & 192.168.1.6 both map to the same MAC address..that is no bueno.

upvoted 3 times

...