Please a nswer all parts (2-3 lines answer only) for Upvote. 1. a) How can switc

Question

Please answer all parts (2-3 lines answer only) for Upvote.

1. a) How can switch CAM table be used to collect network forensic evidence

b) How can port mirroring be used to collect network forensic evidence

c) What is an "ARP Poisoning" attack?

d) How can Dynamic ARP Inspection (DAI) prevent ARP Poisoning attacks

e) List four operational advantages of using switch VLANs?  

f) What is a VLAN (Virtual Local Area Network?

g) List five or more advantages of a network switch?

h) What is a passsivedns utility?

Explanation / Answer

SOLUTION:-

1 (a):- In switched ethernet atmosphere, switches are used to connect hosts along with the presence of a table that holds the MAC addresses of hosts in network. The transmisison of data packets to destination is done by switches via this table. by this way switch (content-addressable memory) CAM table be used to collect network forensic evidence.

(b):- In port mirroring, configuration of switch is done by copying 1 or more switch port to dedicated port. smooth traffic can be seen via exclusive switch ports by a capture device that is connected to SPAN port.

(c):- In Address Resolution Protocol Poisoning Attack, MAC address is changed by an attacker and also alteration in the ARP cache along with a counterfeit ARP request and reply data packets via attacking ethernet LAN.

(d):- Dynamic ARP Inspection (DAI) is a security mechanism that declines invalid and malevolent ARP packets. Prevention is done by poisoning the ARP caches of its undeclared neighbors on intercepting the traffic by dissocial stations for other stations.

(e):- 1. Better Broadcast Control

2. Increased Network Security

3. Minimization of Costs

4. Transparent on Physical Layer

(f):- VLAN is consists of logically connected devices,servers, work-stations exists in exactly common transmission domain such as single or multiple LANs used for communication.

(g):- 1. permits faster access along with better connection establishment with PCs, routers, and network servers.

2. It removes collisions.

3. It maintains authenticity of data packets due to the concept of store and forward mechanism.

4. Less transmission time due to low latency

5. It can minimize the number of transmission domain.

(h):- By using the passive DNS utility, we can log responses accepted from distinct name server machines via recursive name server machines and further this log data can be imitate to central database server.

======================================================================================

Related Questions

Navigate

• Browse (All)
• Browse P
• Subjects

Integrity-first tutoring: explanations and feedback only — we do not complete graded work. Learn more.