Which tool is a security application that detects ARP-based attacks?

Which tool is a security application that detects ARP-based attacks?

• A. DAI
• B. XArp
• C. ICMP Router Discovery Protocol (IRDP)
• D. STP attack

Answer: (B)

ARP spoofing disrupts who your devices believe is the owner of an IP by sending forged ARP replies, which can lead to interception or manipulation of traffic. Detecting this requires a tool that watches ARP traffic, learns a baseline of legitimate IP-to-MAC mappings, and alerts when something seems off. XArp fits this role as a security application that monitors ARP activity, builds a map of IP addresses to MAC addresses on the local network, and flags anomalies such as a single IP advertising multiple MACs or a MAC appearing for multiple IPs, or unexpected ARP replies. These signals point to potential ARP-based attacks and MITM attempts, allowing you to respond quickly. Other options refer to a switch feature that protects ARP by inspecting packets, a protocol unrelated to ARP detection, or a description of an attack method rather than a detection tool.

ARP spoofing disrupts who your devices believe is the owner of an IP by sending forged ARP replies, which can lead to interception or manipulation of traffic. Detecting this requires a tool that watches ARP traffic, learns a baseline of legitimate IP-to-MAC mappings, and alerts when something seems off.

XArp fits this role as a security application that monitors ARP activity, builds a map of IP addresses to MAC addresses on the local network, and flags anomalies such as a single IP advertising multiple MACs or a MAC appearing for multiple IPs, or unexpected ARP replies. These signals point to potential ARP-based attacks and MITM attempts, allowing you to respond quickly.

Other options refer to a switch feature that protects ARP by inspecting packets, a protocol unrelated to ARP detection, or a description of an attack method rather than a detection tool.