exam questions

Exam PT1-002 All Questions

View all questions & answers for the PT1-002 exam

Exam PT1-002 topic 1 question 28 discussion

Actual exam question from CompTIA's PT1-002
Question #: 28
Topic #: 1
[All PT1-002 Questions]

A consultant is reviewing the following output after reports of intermittent connectivity issues:
? (192.168.1.1) at 0a:d1:fa:b1:01:67 on en0 ifscope [ethernet]
? (192.168.1.12) at 34:a4:be:09:44:f4 on en0 ifscope [ethernet]
? (192.168.1.17) at 92:60:29:12:ac:d2 on en0 ifscope [ethernet]
? (192.168.1.34) at 88:de:a9:12:ce:fb on en0 ifscope [ethernet]
? (192.168.1.136) at 0a:d1:fa:b1:01:67 on en0 ifscope [ethernet]
? (192.168.1.255) at ff:ff:ff:ff:ff:ff on en0 ifscope [ethernet]
? (224.0.0.251) at 01:02:5e:7f:ff:fa on en0 ifscope permanent [ethernet]
? (239.255.255.250) at ff:ff:ff:ff:ff:ff on en0 ifscope permanent [ethernet]
Which of the following is MOST likely to be reported by the consultant?

  • A. A device on the network has an IP address in the wrong subnet.
  • B. A multicast session was initiated using the wrong multicast group.
  • C. An ARP flooding attack is using the broadcast address to perform DDoS.
  • D. A device on the network has poisoned the ARP cache.
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
BinarySoldier
Highly Voted 3 years, 5 months ago
I think the correct answer should be D. The gateway for the network (192.168.1.1) is at 0a:d1:fa:b1:01:67, and then, another machine (192.168.1.136) also claims to be on the same MAC address. With this on the same network, intermittent connectivity will be inevitable as along as the gateway remains unreachable on the IP known by the others machines on the network, and given that the new machine claiming to be the gateway has not been configured to route traffic.
upvoted 9 times
Davar39
3 years, 3 months ago
I m with you on that. D should be the correct answer.
upvoted 3 times
...
...
brandonl
Highly Voted 3 years, 1 month ago
D is correct. 192.168.1.136 is spoofing the gateway.
upvoted 7 times
...
Anarckii
Most Recent 1 year, 10 months ago
Selected Answer: D
192.168.1.1 and 192.168.1.136 have the same MAC address
upvoted 2 times
...
kiduuu
2 years, 11 months ago
Selected Answer: D
The gateway for the network (192.168.1.1) is at 0a:d1:fa:b1:01:67, and then, another machine (192.168.1.136) also claims to be on the same MAC address
upvoted 2 times
maps7
2 years, 10 months ago
how do we know that 192.168.1.1 ? I get the point that this might be ARP poisoning but with comptia work with information you are given don't assume
upvoted 2 times
TheITStudent
2 years, 9 months ago
@maps, good question. it is standard practice that for IPv4, the last address as a .255 is the broadcasting address (we see this being followed above as the .255 has the ff:ff:ff:ff mac address (which is broadcasting), with this detail, I think it is safe to INFER, based on that data, that standard procedure is being followed and the .1 is the gateway, as is standard procedure in setting up a network. hope that helps.
upvoted 1 times
...
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago