A network admin contacts you. He is concerned that ARP spoofing or poisoning might occur on his network. What are some things he can do to prevent it?
Select the best answers.
A.
Use port security on his switches.
B.
Use a tool like ARPwatch to monitor for strange ARP activity.
C.
Use a firewall between all LAN segments.
D.
If you have a small network, use static ARP entries.
E.
Use only static IP addresses on all PC’s.
Explanation:
Explanations:
By using port security on his switches, the switches will only allow the first MAC address that is connected to the switch to use that port, thus preventing ARP spoofing. ARPWatch is a tool that monitors for strange ARP activity. This may help identify ARP spoofing when it happens. Using firewalls between all LAN segments is possible and may help, but is usually pretty unrealistic. On a very small network, static ARP entries are a possibility. However, on a large network, this is not an realistic option. ARP spoofing doesn’t have anything to do with static or dynamic IP addresses.
Thus, this option won’t help you.