Exam 312-50v13 topic 1 question 93 discussion

Actual exam question from ECCouncil's 312-50v13

Question #: 93
Topic #: 1

You are using a public Wi-Fi network inside a coffee shop. Before surfing the web, you use your VPN to prevent intruders from sniffing your traffic.
If you did not have a VPN, how would you identify whether someone is performing an ARP spoofing attack on your laptop?

A. You should check your ARP table and see if there is one IP address with two different MAC addresses.
B. You should scan the network using Nmap to check the MAC addresses of all the hosts and look for duplicates.
C. You should use netstat to check for any suspicious connections with another IP address within the LAN.
D. You cannot identify such an attack and must use a VPN to protect your traffic.

Show Suggested Answer

Suggested Answer: A 🗳️

by MHafizC at Jan. 15, 2025, 2:15 p.m.

Comments

Submit Cancel

paske

1 week, 4 days ago

Selected Answer: B

Answer B

upvoted 1 times

...

jonekool

2 months, 1 week ago

Selected Answer: A

Answer is A

upvoted 1 times

...

marcel9999

3 months, 4 weeks ago

Selected Answer: A

A , command arp -a Inconsistencies: If you see your gateway’s IP address associated with different MAC addresses at different times, that’s a red flag. Unusual Entries: Look for multiple entries for the same IP or MAC addresses that don’t match the known physical addresses of your network devices.

upvoted 2 times

...

MHafizC

5 months, 2 weeks ago

Selected Answer: A

This is related to ARP spoofing attack. You can check that on your machine, in the ARP table.

upvoted 2 times

...