Exam SY0-501 topic 1 question 905 discussion

Actual exam question from CompTIA's SY0-501

Question #: 905
Topic #: 1

A security analyst has received several reports of an issue on an internal web application. Users state they are having to provide their credentials twice to log in.
The analyst checks with the application team and notes this is not an expected behavior. After looking at several logs, the analyst decides to run some commands on the gateway and obtains the following output:

Which of the following BEST describes the attack the company is experiencing?

A. MAC flooding
B. URL redirection
C. ARP poisoning
D. DNS hijacking

Show Suggested Answer

Suggested Answer: C 🗳️

by Samwell21 at May 21, 2021, 12:31 p.m.

Comments

Submit Cancel

malexuaa

3 years, 10 months ago

C is right. if you think about it, they are all dynamic and static just poisoned the log. This is very right

upvoted 1 times

...

StickyMac

3 years, 11 months ago

If you see where the last MAC says static, this MAC is forged and its indication of ARP poisoning.

upvoted 4 times

...

Samwell21

3 years, 11 months ago

Is this correct and if so why? I really struggled with logout puts.

upvoted 2 times

KJ44

3 years, 11 months ago

...While static entries provide some security against spoofing, they result in maintenance efforts as address mappings for all systems in the network must be generated and distributed. https://en.wikipedia.org/wiki/ARP_spoofing#Static_ARP_entries

upvoted 1 times

...

Exam SY0-501 All Questions

View all questions & answers for the SY0-501 exam

Exam SY0-501 topic 1 question 905 discussion

Comments

malexuaa

StickyMac

Samwell21

KJ44

SY0-701