GAQM CPEH-001 Exam - Topic 1 Question 105 Discussion

Actual exam question for GAQM's CPEH-001 exam

Question #: 105
Topic #: 1

[All CPEH-001 Questions]

How do you defend against ARP Spoofing? Select three.

AUse ARPWALL system and block ARP spoofing attacks

BTune IDS Sensors to look for large amount of ARP traffic on local subnets

CUse private VLANS

DPlace static ARP entries on servers, workstation and routers

Show Suggested Answer

Suggested Answer: C

System Key hotfix is an optional feature which allows stronger encryption of SAM. Strong encryption protects private account information by encrypting the password data using a 128-bit cryptographically random key, known as a password encryption key.

by Lettie at Jan 13, 2025, 12:25 PM

Limited Time Offer

25%

Off

Get Premium CPEH-001 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Devora

6 months ago

Private VLANs (C) seem a bit overkill for this issue, not sure about that one.

upvoted 0 times

...

Whitley

6 months ago

Wait, can you really prevent all ARP spoofing with just these methods?

upvoted 0 times

...

Julio

6 months ago

B is important too, monitoring ARP traffic can help catch attacks.

upvoted 0 times

...

Afton

7 months ago

I think D is the best option, static entries are reliable.

upvoted 0 times

...

Thad

7 months ago

A is a solid choice for blocking ARP spoofing!

upvoted 0 times

...

Lemuel

7 months ago

Private VLANs sound familiar, but I’m not sure how effective they are against ARP spoofing compared to static entries or ARPWALL.

upvoted 0 times

...

Vilma

7 months ago

I think ARPWALL was mentioned in class as a way to block ARP spoofing, but I’m not confident if it’s the best choice compared to the others.

upvoted 0 times

...

Dallas

7 months ago

I feel like tuning IDS sensors for ARP traffic could help, but I can't recall if it was specifically mentioned as a primary defense in our practice questions.

upvoted 0 times

...

Art

8 months ago

I remember studying ARP spoofing defenses, and I think using static ARP entries is a solid option, but I'm not entirely sure about the other choices.

upvoted 0 times

...

Ty

8 months ago

Okay, let's think this through. Static ARP entries, IDS monitoring, and ARPWALL - that covers the key bases. I feel good about those three choices.

upvoted 0 times

...

Annmarie

8 months ago

Private VLANs? I'm not sure how that would help with ARP spoofing. I think I'll go with the static ARP entries, IDS tuning, and ARPWALL system. Seems like the most comprehensive approach.

upvoted 0 times

...

Gearldine

8 months ago

Hmm, I'm a bit unsure about the ARPWALL system. I'll have to look into that more. But I'm pretty sure the other two options, static ARP entries and IDS tuning, are good strategies.

upvoted 0 times

...

Fidelia

8 months ago

I'm pretty confident about this one. I think using static ARP entries, tuning the IDS, and implementing ARPWALL are the best ways to defend against ARP spoofing.

upvoted 0 times

...