Which of the following attacks involves overwhelming a switch's CAM table with spoofed MAC addresses, causing the switch to flood traffic to all ports?
Correct Answer: C
MAC flooding overwhelms a switch's CAM (Content Addressable Memory) table by sending a flood of frames with spoofed MAC addresses. Once the CAM table overflows, the switch cannot learn legitimate MAC addresses and defaults to flooding all frames out all ports, effectively turning it into a hub. This allows an attacker to capture traffic not originally destined for their port.
* A. ARP poisoning corrupts ARP tables to redirect traffic but does not overflow the CAM table.
* B. Evil twin is a wireless rogue AP attack, unrelated to switch behavior.
* D. DNS spoofing redirects domain queries, not Layer 2 switching.
References (CompTIA Network+ N10-009):
* Domain: Network Security - Switch security, CAM table attacks, MAC flooding.