Valid CFR-310 Dumps shared by ExamDiscuss.com for Helping Passing CFR-310 Exam! ExamDiscuss.com now offer the newest CFR-310 exam dumps, the ExamDiscuss.com CFR-310 exam questions have been updated and answers have been corrected get the newest ExamDiscuss.com CFR-310 dumps with Test Engine here:
When tracing an attack to the point of origin, which of the following items is critical data to map layer 2 switching?
Correct Answer: B
Explanation The host that owns the IP address sends an ARP reply message with its physical address. Each host machine maintains a table, called ARP cache, used to convert MAC addresses to IP addresses. Since ARP is a stateless protocol, every time a host gets an ARP reply from another host, even though it has not sent an ARP request for that reply, it accepts that ARP entry and updates its ARP cache. The process of updating a target host's ARP cache with a forged entry is referred to as poisoning.
