Examkin

Soru

Zorluk: OrtaKey Security Concepts, Threats, Vulnerabilities, and Mitigations

An enterprise network administrator discovers that an unauthorized host on an internal VLAN is performing a Man-in-the-Middle (MitM) attack by broadcasting spoofed ARP messages, associating its own MAC address with the IP address of the default gateway. Which Layer 2 security mechanism should be implemented on the access switches to mitigate this specific threat?

  1. Dynamic ARP Inspection (DAI) to validate ARP requests and responses against the trusted DHCP snooping binding database.Cevap
  2. B
    TACACS+ authentication configured on switch access ports to encrypt all ARP payload headers traversing the data plane.
  3. C
    Port security with sticky MAC learning enabled on access interfaces without persisting the running configuration to NVRAM.
  4. D
    A standard inbound IPv4 Access Control List (ACL) applied to the switch virtual interface without an explicit permit clause.

Cevap

Dynamic ARP Inspection (DAI) should be configured on access switches to validate ARP packets against the DHCP snooping binding database.
Dynamic ARP Inspection (DAI) is the primary mitigation technique against ARP poisoning and ARP spoofing attacks. DAI intercepts all ARP requests and responses on untrusted switch ports and verifies the validity of the IP-to-MAC bindings against the trusted DHCP snooping binding database before forwarding the packet.

Adım Adım Çözüm

1
Identify the type of attack described in the scenario.
The attack described is ARP spoofing/poisoning, where an attacker sends fake ARP messages to intercept network traffic.
Understanding the attack mechanism (Layer 2 address resolution manipulation) is necessary to choose the appropriate mitigation tool.
2
Evaluate security mechanisms designed to inspect and protect Layer 2 ARP traffic.
Dynamic ARP Inspection (DAI) is specifically designed to prevent ARP poisoning by comparing ARP IP-to-MAC mapping claims against a reliable binding source (DHCP Snooping database).
DAI intercepts ARP packets on untrusted ports and drops invalid ARP responses.

Anahtar Kavram

Mitigating Layer 2 ARP Spoofing Attacks using Dynamic ARP Inspection (DAI)
Tahmini Süre:1m 30s
Bu soruyu puanla

Konular

Key Security Concepts, Threats, Vulnerabilities, and Mitigations

Bu konudan daha fazla soru