ARP Spoofing is associated with which protocol?

ARP Spoofing is associated with which protocol?

• A. DNS
• B. ARP
• C. TCP
• D. IP

Answer: (B)

ARP Spoofing targets the Address Resolution Protocol, which maps IP addresses to MAC addresses on a local network. ARP is trusted and lacks built-in authentication, so an attacker can send forged ARP replies to associate the attacker's MAC address with a legitimate IP. When hosts update their ARP caches with this false mapping, traffic intended for that IP is sent to the attacker, enabling interception or manipulation of data. This specific vulnerability lies in ARP itself, not in DNS, TCP, or IP. DNS deals with resolving domain names to IPs, TCP handles reliable transport, and IP handles addressing and routing at a different layer. Understanding ARP spoofing hinges on recognizing how ARP operates and why its lack of authentication makes it susceptible to spoofing. Mitigations include static ARP entries, dynamic ARP inspection on switches, and network segmentation to limit broadcast domains.

ARP Spoofing targets the Address Resolution Protocol, which maps IP addresses to MAC addresses on a local network. ARP is trusted and lacks built-in authentication, so an attacker can send forged ARP replies to associate the attacker's MAC address with a legitimate IP. When hosts update their ARP caches with this false mapping, traffic intended for that IP is sent to the attacker, enabling interception or manipulation of data. This specific vulnerability lies in ARP itself, not in DNS, TCP, or IP. DNS deals with resolving domain names to IPs, TCP handles reliable transport, and IP handles addressing and routing at a different layer. Understanding ARP spoofing hinges on recognizing how ARP operates and why its lack of authentication makes it susceptible to spoofing. Mitigations include static ARP entries, dynamic ARP inspection on switches, and network segmentation to limit broadcast domains.