ExamTopics Logo
Mail Us[email protected]
Menu
Eccouncil Discussions
exam questions

Exam 312-50v13 All Questions

View all questions & answers for the 312-50v13 exam
Go to Exam

Exam 312-50v13 topic 1 question 93 discussion

Actual exam question from ECCouncil's 312-50v13
Question #: 93
Topic #: 1
[All 312-50v13 Questions]

You are using a public Wi-Fi network inside a coffee shop. Before surfing the web, you use your VPN to prevent intruders from sniffing your traffic.
If you did not have a VPN, how would you identify whether someone is performing an ARP spoofing attack on your laptop?

  • A. You should check your ARP table and see if there is one IP address with two different MAC addresses.
  • B. You should scan the network using Nmap to check the MAC addresses of all the hosts and look for duplicates.
  • C. You should use netstat to check for any suspicious connections with another IP address within the LAN.
  • D. You cannot identify such an attack and must use a VPN to protect your traffic.
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️
by MHafizC at Jan. 15, 2025, 2:15 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
marcel9999
1 month, 2 weeks ago
Selected Answer: A
A , command arp -a Inconsistencies: If you see your gateway’s IP address associated with different MAC addresses at different times, that’s a red flag. Unusual Entries: Look for multiple entries for the same IP or MAC addresses that don’t match the known physical addresses of your network devices.
upvoted 2 times
...
MHafizC
3 months ago
Selected Answer: A
This is related to ARP spoofing attack. You can check that on your machine, in the ARP table.
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago