CompTIA CySA+ (CS0-002) — Question 83

A security analyst is reviewing the following requirements for new time clocks that will be installed in a shipping warehouse:

• The clocks must be configured so they do not respond to ARP broadcasts.
• The server must be configured with static ARP entries for each clock.

Which of the following types of attacks will this configuration mitigate?

Answer options

• A. Spoofing
• B. Overflows
• C. Rootkits
• D. Sniffing

Correct answer: A

Explanation

This configuration will help mitigate spoofing attacks, where an attacker might impersonate a legitimate device by sending fake ARP messages. By not responding to ARP broadcasts and using static ARP entries, the time clocks become less vulnerable to such impersonation attempts. The other options, including overflows, rootkits, and sniffing, are not directly addressed by this specific ARP configuration.