MCQs

Disclaimer:

Educational Use Only:

The website links provided are to be used strictly for educational and knowledge-gaining purposes only.

No Misuse:

Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.

Respect for Websites and Businesses:

Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.

Acknowledge Value of Knowledge:

Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.

No Endorsement:

The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.

User Responsibility:

By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.

What does ARP stand for?
a. Address Resource Protocol
b. Address Resolution Protocol
c. Automatic Resolution Protocol
d. Active Routing Protocol
Answer: b. Address Resolution Protocolwayground
Which OSI layer does ARP operate in?
a. Application Layer
b. Data Link Layer
c. Network Layer
d. Physical Layer
Answer: b. Data Link Layerwayground
What is ARP Poisoning?
a. Manipulating DNS records
b. Sending fake ARP replies to mislead devices
c. Encrypting ARP requests
d. Hiding MAC addresses on the network
Answer: b. Sending fake ARP replies to mislead deviceswayground
What is the main goal of ARP Poisoning?
a. Map IP addresses to domain names
b. Steal or manipulate network traffic
c. Bypass firewalls
d. Disconnect devices from the network
Answer: b. Steal or manipulate network trafficwayground
In ARP Poisoning, the attacker usually sends:
a. Genuine ARP replies
b. Spoofed ARP replies
c. Malformed DNS packets
d. Broadcast ICMP requests
Answer: b. Spoofed ARP replieswayground
Which attack is ARP Poisoning commonly used for?
a. DDoS attack
b. SQL Injection
c. MITM (Man-in-the-Middle) attack
d. Phishing
Answer: c. MITM (Man-in-the-Middle) attackwayground
What does ARP Poisoning primarily target?
a. Network switches
b. Mapping between IP and MAC addresses
c. DNS servers
d. Application layer protocols
Answer: b. Mapping between IP and MAC addresseswayground
What can happen due to ARP Poisoning?
a. Increased network bandwidth
b. Data interception or redirection
c. Strengthened encryption
d. Faster DNS resolution
Answer: b. Data interception or redirectionwayground
Which tool is commonly used for ARP Poisoning?
a. Wireshark
b. Ettercap
c. Burp Suite
d. Nikto
Answer: b. Ettercapwayground
How can ARP Poisoning be mitigated?
a. Enabling DHCP
b. Using static ARP entries
c. Increasing network bandwidth
d. Implementing DNSSEC
Answer: b. Using static ARP entrieswayground
ARP Poisoning is also called:
a. ARP cache poisoning
b. ARP spoofing
c. ARP poison routing
d. All of these
Answer: d. All of thesewatelectronics
What kind of addresses does ARP map?
a. MAC to IP
b. IP to MAC
c. Domain to IP
d. Both a and b
Answer: d. Both a and bwatelectronics
What protocol is responsible for resolving IP to MAC on a local network?
a. IP
b. MAC
c. ARP
d. DNS
Answer: c. ARPwatelectronics
Why is ARP vulnerable to attacks like ARP Poisoning?
a. It uses weak encryption
b. It lacks authentication
c. It only works on the WAN
d. It is not used in modern networks
Answer: b. It lacks authenticationgeeksforgeeks+1
Which type of network is mostly affected by ARP Poisoning?
a. WAN
b. LAN
c. MAN
d. PAN
Answer: b. LANradware
What is the default behavior of ARP?
a. Unicast
b. Multicast
c. Broadcast
d. Anycast
Answer: c. Broadcastwatelectronics
What is stored in the ARP cache?
a. IP addresses
b. MAC addresses
c. IP to MAC address mappings
d. DNS mappings
Answer: c. IP to MAC address mappingsvaronis+1
What is a Man-in-the-Middle (MITM) attack in context to ARP Poisoning?
a. Attacker relays and possibly alters communication between two devices
b. Attacker disables the network
c. Attacker deletes files
d. Attacker sends spam mails
Answer: a. Attacker relays and possibly alters communication between two devicessentinelone+1
What happens if ARP cache entries are poisoned?
a. Network runs faster
b. Traffic is diverted to the attacker
c. Devices shut down
d. Nothing
Answer: b. Traffic is diverted to the attackervaronis+1
What does static ARP entry mean?
a. Automatically updated
b. Manually set and not changed
c. Set once an hour
d. Removed after restart
Answer: b. Manually set and not changedwayground
Which of the following is NOT a result of ARP Poisoning?
a. Increased security
b. Traffic interception
c. Traffic manipulation
d. Denial of Service
Answer: a. Increased securityradware+1
ARP Poisoning allows the execution of which attack?
a. MITM
b. Session Hijacking
c. DoS
d. All of these
Answer: d. All of thesevaronis
Which protocol provides ARP-like functionality in IPv6 networks?
a. DHCP
b. Neighbor Discovery Protocol (NDP)
c. ICMP
d. TCP
Answer: b. Neighbor Discovery Protocol (NDP)watelectronics
Free ARP responses sent without a request are called:
a. Proxy ARP
b. Reverse ARP
c. Gratuitous ARP
d. None
Answer: c. Gratuitous ARPvaronis+1
What’s the result of a successful ARP Poisoning attack on a router?
a. Only the attacker loses access
b. Internet for all is disconnected
c. Traffic for an entire subnet is affected
d. ARP resets
Answer: c. Traffic for an entire subnet is affectedgeeksforgeeks+1
Which devices commonly use ARP?
a. Switches
b. Routers
c. End-user computers
d. All of these
Answer: d. All of thesevaronis+1
What’s a sign of possible ARP Poisoning?
a. Unexpected network slowdowns
b. Security warning popups
c. High CPU usage
d. Frequent password changes
Answer: a. Unexpected network slowdownsradware+1
What is one prevention strategy for ARP Poisoning?
a. Use of encrypted Wi-Fi only
b. Using VPNs
c. Static ARP tables
d. Using HTTP
Answer: c. Static ARP tablesvaronis+1
ARP cache entries are generally:
a. Constant
b. Dynamic
c. Hardware
d. Removable only via reboot
Answer: b. Dynamicwatelectronics
ARP responses in a normal operation are:
a. Always broadcast
b. Always unicast
c. Both a and b
d. Multicast
Answer: b. Always unicastwatelectronics
“Ettercap” is used for:
a. Packet capturing
b. Network scanning
c. ARP Poisoning
d. Log management
Answer: c. ARP Poisoningvaronis+1
In ARP Poisoning, what does an attacker try to achieve?
a. Hide their IP
b. Associate victim’s IP address with attacker’s MAC
c. Block DNS requests
d. Change subnet masks
Answer: b. Associate victim’s IP address with attacker’s MACradware+1
What is ARP cache timeout?
a. Time interval for ARP cache entries to expire
b. Network downtime period
c. Firewall reset event
d. DHCP lease interval
Answer: a. Time interval for ARP cache entries to expirewatelectronics
MITM attacks using ARP Poisoning can lead to:
a. Encrypted traffic only
b. Identity theft
c. Only data loss
d. Stronger authentication
Answer: b. Identity theftsentinelone+1
Which is NOT a defense against ARP Poisoning?
a. Dynamic ARP Inspection
b. Using HTTPS for all sites
c. Static ARP entries
d. Packet filtering
Answer: b. Using HTTPS for all sitesvaronis+1
What is the size of a standard ARP packet?
a. 28 bytes
b. 32 bytes
c. 48 bytes
d. 16 bytes
Answer: a. 28 byteswatelectronics
When an attack manipulates ARP data for e-commerce/banking, what is this an example of?
a. Session Hijacking
b. DoS
c. MITM
d. ARP flooding
Answer: a. Session Hijackingvaronis
ARP Flooding is:
a. Sending many ARP requests to overflow switches
b. Broadcasting high-volume DNS replies
c. Blocking MAC addresses
d. Shutting down the router
Answer: a. Sending many ARP requests to overflow switchesvaronis
Why do attackers combine ARP Poisoning with DNS Spoofing?
a. To improve encryption
b. To intercept/redirect traffic
c. To make ARP faster
d. To hide MAC address
Answer: b. To intercept/redirect trafficvaronis
What is “gratuitous ARP” often used for?
a. Announcing a new IP/MAC binding
b. Disabling firewalls
c. Sending ARP requests to all
d. Reseting switch tables
Answer: a. Announcing a new IP/MAC bindingwatelectronics
What specifies the operation performed in an ARP packet?
a. Protocol Type
b. Hardware Type
c. Operation field
d. Protocol Address
Answer: c. Operation fieldwatelectronics
Which is NOT a type of ARP?
a. Proxy ARP
b. Legitimate ARP
c. Reverse ARP
d. Gratuitous ARP
Answer: b. Legitimate ARPwatelectronics
ARP Poisoning is possible primarily due to:
a. Open authentication
b. ARP’s lack of authentication
c. Limited IP scopes
d. High network speed
Answer: b. ARP’s lack of authenticationwikipedia+1
Which of these is the best description of ARP cache?
a. Temporary IP to MAC table on device
b. Port table on network switches
c. List of opened sockets
d. DNS resolver cache
Answer: a. Temporary IP to MAC table on devicevaronis+1
Who can send ARP replies on a network?
a. Only the intended target
b. Any device
c. Routers only
d. Servers only
Answer: b. Any devicegeeksforgeeks+1
What field is set to zero in a gratuitous ARP?
a. Sender Hardware Address
b. Target Hardware Address
c. Protocol Type
d. Hardware Length
Answer: b. Target Hardware Addresswatelectronics
To check for IP conflicts, which ARP type is used?
a. Gratuitous ARP
b. Proxy ARP
c. Spoof ARP
d. Unicast ARP
Answer: a. Gratuitous ARPwatelectronics
ARP Spoofing is most effective on networks without:
a. Wi-Fi protection
b. Static ARP tables
c. DNS servers
d. Firewalls
Answer: b. Static ARP tablessentinelone+1
What is the main weakness exploited in ARP Poisoning?
a. Broadcasting nature of ARP
b. Simple protocol structure
c. Lack of authentication
d. OSI layer design
Answer: c. Lack of authenticationwikipedia+2
What does ARP stand for in full form?
a. Actual Resolution Protocol
b. Address Resolution Protocol
c. Accurate Routing Protocol
d. Algorithmic Routing Protocol
Answer: b. Address Resolution Protocolwayground

Blog

Systemethic Technologies

Leave a Reply Cancel reply

Useful links

Other Terms & Policies

Contact Info