Free Cisco 200-201 Actual Exam Questions - Question 8 Discussion
What is occurring in this network?
It’s D since the MAC table overflow clearly signals a MAC flooding attack here.
D imo, the key is the switch's MAC table being overwhelmed with fake addresses, which matches a MAC flooding attack. ARP or DNS cache poisoning wouldn’t cause this many MAC entries to appear.
Maybe D. The sheer number of different MAC addresses in the table hints at flooding, not poisoning. ARP or DNS attacks wouldn’t create that many fake MAC entries.
I agree it's D since the switch shows tons of fake MAC addresses, leading to flooding. ARP or DNS cache poisoning wouldn’t explain that volume of MAC entries. D it is.
It’s D again for me. The key here is all those MAC addresses filling up the table, which causes the switch to flood frames out all ports. That behavior matches a MAC flooding attack perfectly. ARP or DNS poisoning wouldn’t show this kind of MAC table overload. C doesn’t fit either since the table is full, not overflowing into something else.
It’s D because the switch’s MAC table is maxed out and showing lots of unknown MACs, which fits with a MAC flooding attack, not ARP or DNS poisoning.
A imo, because the IP and MAC bindings seem mismatched, which points more to ARP cache poisoning than just a flooding attack.
What version of the switch is shown here?