exam questions

Exam SY0-501 All Questions

View all questions & answers for the SY0-501 exam

Exam SY0-501 topic 1 question 684 discussion

Actual exam question from CompTIA's SY0-501
Question #: 684
Topic #: 1
[All SY0-501 Questions]

Which of the following enables sniffing attacks against a switched network?

  • A. ARP poisoning
  • B. IGMP snooping
  • C. IP spoofing
  • D. SYN flooding
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Tzu
Highly Voted 5 years ago
On a Switched Network = ARP Poisoning. On a Routed Network = IP Spoofing.
upvoted 58 times
Figekioki
3 years, 10 months ago
Also, IP spoofing doesn't allow you to sniff a network. It just means you are changing your IP.
upvoted 1 times
...
...
fury247
Most Recent 3 years, 10 months ago
Would have been sure if ARP Spoofing was listed. ARP Spoofing: In this case, an attacker can spoof the MAC address of a trusted host and forge ARP request/replies to overload the Switch. Then the switch is set in “forward mode” an attacker can now sniff the packets on the traffic. ARP Poisoning: Attacker chooses targets and floods their ARP cache with forged entries thus replacing the MAC address of targets with MAC address of attacker. ARP poisoning is used in Man in the middle attack.
upvoted 1 times
...
vaxakaw829
4 years, 8 months ago
https://en.wikipedia.org/wiki/ARP_spoofing Sniffing in a Switched Network >>> ... It’s the path of arp spoofing. By using this technique you can fool your target machines to send data through your attacking machine and then you can sniff it on your attacking machine. ... (http://articles.manugarg.com/arp_spoofing.pdf)
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago