CompTIA Network+ (N10-007) — Question 656

A technician is troubleshooting a host that is having intermittent issues connecting to internal network resources and the company servers. Using a packet sniffer, the technician notices there are several TCP communications that are missing packets in sequence and need to be retransmitted. The technician receives several
SYN-ACK packets with incorrect addressing. Which of the following is the MOST likely cause of these issues?

Answer options

• A. DNS poisoning attack
• B. Evil twin on the company network
• C. ARP poisoning attack
• D. Misconfigured VLAN on the local switch

Correct answer: C

Explanation

The correct answer is C, as ARP poisoning can lead to incorrect MAC address mappings, resulting in packet loss and incorrect packet addressing, which aligns with the technician's observations. Options A and B do not directly explain the missing packet sequences or the incorrect addressing, while D, while related to network configuration, does not specifically account for the symptoms observed.