Which technique involves replacing the MAC address of a compromised machine in the ARP cache of the server to divert traffic?

Which technique involves replacing the MAC address of a compromised machine in the ARP cache of the server to divert traffic?

• A. ARP Poisoning
• B. Forced ARP Entry
• C. MAC Flooding
• D. DNS Spoofing

Answer: (B)

The idea here is ARP cache manipulation: by injecting forged ARP information, the attacker makes a system map the target IP to the attacker’s MAC address in its ARP table, so traffic intended for the compromised machine is sent to the attacker instead. This exact action is a form of ARP spoofing/poisoning, and the specific phrasing describes forcing an ARP entry into the server’s cache so that the IP-to-MAC mapping points to the attacker. That’s how traffic can be diverted and potentially intercepted or hijacked. DNS spoofing, MAC flooding, and basic ARP poisoning are different mechanisms: DNS spoofing tamper with name-to-address resolution, MAC flooding overwhelms a switch’s memory to force broadcasts, and ARP poisoning is the broader tactic of corrupting ARP mappings to redirect traffic. Forcing an ARP entry is a concrete method to achieve the ARP cache manipulation described. To defend, use static ARP entries where practical, enable dynamic ARP inspection, and monitor for ARP anomalies.

The idea here is ARP cache manipulation: by injecting forged ARP information, the attacker makes a system map the target IP to the attacker’s MAC address in its ARP table, so traffic intended for the compromised machine is sent to the attacker instead. This exact action is a form of ARP spoofing/poisoning, and the specific phrasing describes forcing an ARP entry into the server’s cache so that the IP-to-MAC mapping points to the attacker. That’s how traffic can be diverted and potentially intercepted or hijacked.

DNS spoofing, MAC flooding, and basic ARP poisoning are different mechanisms: DNS spoofing tamper with name-to-address resolution, MAC flooding overwhelms a switch’s memory to force broadcasts, and ARP poisoning is the broader tactic of corrupting ARP mappings to redirect traffic. Forcing an ARP entry is a concrete method to achieve the ARP cache manipulation described. To defend, use static ARP entries where practical, enable dynamic ARP inspection, and monitor for ARP anomalies.