MENU
How do you defend against ARP Spoofing? Select three.
Suggested Answer: C
Get Premium CPEH-001 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
System Key hotfix is an optional feature which allows stronger encryption of SAM. Strong encryption protects private account information by encrypting the password data using a 128-bit cryptographically random key, known as a password encryption key.
30 comments · newest first
DE
Devora
11 months ago
Private VLANs (C) seem a bit overkill for this issue, not sure about that one.
WH
Whitley
11 months ago
Wait, can you really prevent all ARP spoofing with just these methods?
JU
Julio
11 months ago
B is important too, monitoring ARP traffic can help catch attacks.
AF
Afton
12 months ago
I think D is the best option, static entries are reliable.
TH
Thad
12 months ago
A is a solid choice for blocking ARP spoofing!
LE
Lemuel
12 months ago
Private VLANs sound familiar, but I’m not sure how effective they are against ARP spoofing compared to static entries or ARPWALL.
VI
Vilma
1 year ago
I think ARPWALL was mentioned in class as a way to block ARP spoofing, but I’m not confident if it’s the best choice compared to the others.
DA
Dallas
1 year ago
I feel like tuning IDS sensors for ARP traffic could help, but I can't recall if it was specifically mentioned as a primary defense in our practice questions.
AR
Art
1 year ago
I remember studying ARP spoofing defenses, and I think using static ARP entries is a solid option, but I'm not entirely sure about the other choices.
TY
Ty
1 year ago
Okay, let's think this through. Static ARP entries, IDS monitoring, and ARPWALL - that covers the key bases. I feel good about those three choices.
AN
Annmarie
1 year ago
Private VLANs? I'm not sure how that would help with ARP spoofing. I think I'll go with the static ARP entries, IDS tuning, and ARPWALL system. Seems like the most comprehensive approach.
GE
Gearldine
1 year ago
Hmm, I'm a bit unsure about the ARPWALL system. I'll have to look into that more. But I'm pretty sure the other two options, static ARP entries and IDS tuning, are good strategies.
FI
Fidelia
1 year ago
I'm pretty confident about this one. I think using static ARP entries, tuning the IDS, and implementing ARPWALL are the best ways to defend against ARP spoofing.
AD
Adelina
1 year ago
I'll just put a giant 'No ARP Spoofing Allowed' sign on my network. That'll scare 'em off, right?
RA
Raul
1 year ago
Hold up, you're telling me I can't just use 'password' as my ARP password? Dang, back to the drawing board.
MA
Marquetta
1 year ago
D) Place static ARP entries on servers, workstation and routers
CA
Carmela
1 year ago
B) Tune IDS Sensors to look for large amount of ARP traffic on local subnets
EZ
Ezekiel
1 year ago
A) Use ARPWALL system and block ARP spoofing attacks
IL
Ilona
1 year ago
Static ARP entries? What is this, the Stone Age? I'll take my chances with the IDS, thank you very much.
LO
Lonna
1 year ago
Hmm, private VLANs? Sounds like a fancy way to say 'let's segregate the network and make it more complicated'.
EU
Eulah
1 year ago
D) Place static ARP entries on servers, workstation and routers
DE
Denae
1 year ago
B) Tune IDS Sensors to look for large amount of ARP traffic on local subnets
TI
Tina
1 year ago
A) Use ARPWALL system and block ARP spoofing attacks
YA
Yan
2 years ago
A, B, and D? Looks like a good combo to me. Gotta keep those ARP spoofing attackers at bay!
HA
Haydee
1 year ago
D) Place static ARP entries on servers, workstation and routers
NO
Noble
1 year ago
B) Tune IDS Sensors to look for large amount of ARP traffic on local subnets
AR
Arminda
1 year ago
A) Use ARPWALL system and block ARP spoofing attacks
SH
Shasta
2 years ago
I believe using private VLANS is another effective defense.
TH
Theodora
2 years ago
I agree with Glendora, but tuning IDS Sensors can also help.
GL
Glendora
2 years ago
I think using ARPWALL system is a good defense.