Address Resolution Protocol (ARP) spoofing, also known as ARP poisoning or ARP Poison Routing (APR),...

GIAC GPPA Question Answer

Address Resolution Protocol (ARP) spoofing, also known as ARP poisoning or ARP Poison Routing (APR), is a technique used to attack an Ethernet wired or wireless network. ARP spoofing may allow an attacker to sniff data frames on a local area network (LAN), modify the traffic, or stop the traffic altogether. The principle of ARP spoofing is to send fake ARP messages to an Ethernet LAN.

What steps can be used as a countermeasure of ARP spoofing?

Each correct answer represents a complete solution. (Choose all that apply.)

Using smash guard utility.

Using ARP Guard utility.

Using static ARP entries on servers, workstation and routers.

Using ARP watch utility.

Using IDS Sensors to check continually for large amount of ARP traffic on local subnets.