TestOut - CompTIA CySA+ Practice Questions 6.5.12 with Questions and Correct Answers 2025.

Test Out – Comp Tia CySA+ Practice
Questions 6.5.12 with Questions and
Correct Answers 2025




Which ,of ,the ,following ,is ,the ,term ,used ,to ,describe ,what ,happens ,when ,an ,attacker
,sends ,falsified ,messages ,to ,link ,their ,MAC ,address ,with ,the ,IP ,address ,of ,a
,legitimate ,computer ,or ,server ,on ,a ,network?


A. ,Port ,mirroring
B. ,MAC ,flooding
C. ,MAC ,spoofing
D. ,ARP ,poisoning ,- ,CORRECT ,ANSWER-D. ,ARP ,poisoning

Explanation
Address ,Resolution ,Protocol ,(ARP) ,poisoning ,is ,when ,an ,attacker ,sends ,fake ,ARP
,messages ,to ,link ,their ,MAC ,address ,with ,the ,IP ,address ,of ,a ,legitimate ,computer ,or
,server ,on ,a ,network. ,Once ,their ,MAC ,address ,is ,linked ,to ,an ,authentic ,IP ,address,
,the ,attacker ,can ,receive ,any ,messages ,directed ,to ,the ,legitimate ,address. ,As ,a
,result, ,the ,attacker ,can ,intercept, ,modify, ,or ,block ,communications ,to ,the ,legitimate
,MAC ,address.
Port ,mirroring ,creates ,a ,duplicate ,of ,all ,network ,traffic ,on ,a ,port ,and ,sends ,it ,to
,another ,device.
MAC ,flooding ,is ,when ,an ,attacker ,intentionally ,floods ,a ,Content ,Addressable ,Memory
,(CAM) ,table ,with ,Ethernet ,frames, ,each ,originating ,from ,different ,MAC ,addresses.
,Once ,the ,table ,starts ,to ,overflow, ,the ,switch ,responds ,by ,broadcasting ,all ,incoming
,data ,to ,all ,ports, ,basically ,turning ,itself ,into ,a ,hub ,instead ,of ,a ,switch.
MAC ,spoofing ,is ,used ,to ,enable ,bypassing ,of ,access ,control ,lists ,on ,servers ,or
,routers. ,This ,is ,accomplished ,by ,hiding ,a ,computer ,on ,a ,network ,or ,by ,allowing ,it ,to
,impersonate ,another ,network ,device.

, The ,IT ,director ,has ,requested ,that ,you ,verify ,that ,traffic ,to ,a ,new ,server ,from ,her
,machine ,goes ,only ,where ,it ,is ,supposed ,to ,and ,can't ,be ,redirected ,to ,another ,IP
,address. ,You ,decide ,to ,attempt ,to ,manipulate ,traffic ,on ,the ,network ,to ,see ,if ,things
,are ,really ,secure.


You ,have ,pulled ,up ,Ettercap ,and ,plan ,on ,using ,one ,of ,the ,plug-ins ,for ,testing.

Which ,of ,the ,displayed ,plug-ins ,should ,you ,use?

A. ,dns_spoof
B. ,remote_browser
C. ,isolate
D. ,scan_poisoner ,- ,CORRECT ,ANSWER-A. ,dns_spoof

Explanation
The ,correct ,plug-in ,is ,the ,dns_spoof ,plug-in, ,which ,is ,used ,to ,create ,a ,DNS ,cache
,poisoning ,attack ,on ,a ,network ,segment. ,This ,would ,allow ,you, ,if ,successful, ,to ,cause
,traffic ,to ,flow ,from ,the ,director's ,machine ,to ,your ,machine ,instead ,of ,to ,the ,new
,server.
The ,remote_browser ,plug-in ,allows ,you ,to ,copy ,the ,web ,traffic ,seen ,when ,sniffing ,to
,a ,browser ,for ,you ,to ,view.
The ,isolate ,plug-in ,is ,an ,ARP ,poisoning ,tool ,for ,keeping ,a ,host ,from ,contacting ,hosts
,the ,attacker ,chooses ,to ,prevent ,connections ,to.
The ,scan_poisoner ,plug-in ,looks ,for ,ARP ,poisoning ,on ,the ,network ,relative ,to ,a ,listed
,host. ,This ,does ,nothing ,to ,help ,with ,DNS ,cache ,poisoning.


Which ,of ,the ,following ,is ,a ,method ,of ,attack ,that ,is ,intended ,to ,overload ,the ,memory
,of ,a ,network ,switch, ,forcing ,the ,switch ,into ,open-fail ,mode ,and ,thereby ,causing ,it ,to
,broadcast ,incoming ,data ,to ,all ,ports?


A. ,MAC ,spoofing
B. ,Port ,mirroring
C. ,ARP ,poisoning
D. ,MAC ,flooding ,- ,CORRECT ,ANSWER-D. ,MAC ,flooding

Explanation
MAC ,flooding ,is ,a ,method ,of ,attack ,intended ,to ,overflow ,the ,memory ,of ,a ,network
,switch, ,forcing ,the ,switch ,into ,open-fail ,mode. ,This ,causes ,it ,to ,function ,like ,a ,hub,
,broadcasting ,incoming ,data ,to ,all ,ports ,instead ,of ,to ,specific ,addresses. ,The ,network
,switch ,contains ,a ,Content ,Addressable ,Memory ,(CAM) ,table, ,and ,each ,incoming
,MAC ,address ,is ,associated ,with ,a ,physical ,port ,on ,the ,network ,when ,functioning
,normally. ,By ,forcing ,the ,switch ,to ,broadcast ,incoming ,data ,to ,all ,ports, ,an ,attacker
,can ,easily ,intercept ,the ,data.
MAC ,spoofing ,is ,a ,method ,of ,changing ,a ,MAC ,(Media ,Access ,Control) ,address ,of ,a
,network ,interface ,on ,a ,device ,within ,the ,network.