350-701 Security Concepts Practice Question
A security analyst is investigating a potential ARP spoofing attack. Which two symptoms would indicate this type of attack?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Duplicate IP addresses in the ARP table
ARP spoofing involves sending fake ARP messages to associate the attacker's MAC with the IP of another host, causing traffic to be misdirected.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
High CPU usage on the switch
Why it's wrong here
Not a direct symptom of ARP spoofing.
- ✓
Duplicate IP addresses in the ARP table
Why this is correct
ARP spoofing can cause multiple MACs for one IP.
- ✗
Increased broadcast traffic
Why it's wrong here
ARP spoofing does not necessarily increase broadcasts.
- ✓
Intermittent connectivity to a server
Why this is correct
Traffic may be intercepted, causing connectivity issues.
- ✗
Unusual outbound DNS queries
Why it's wrong here
More indicative of DNS tunneling.
Quick reference
Access Control Model Comparison
| Model | Acronym | Who Controls Access? | Best For |
|---|---|---|---|
| Discretionary Access Control | DAC | Resource owner | Small teams, file shares |
| Mandatory Access Control | MAC | System / security labels | Classified govt / military |
| Role-Based Access Control | RBAC | Administrator (via roles) | Enterprise environments |
| Attribute-Based Access Control | ABAC | Policy engine (user + resource attributes) | Fine-grained, dynamic policies |
| Rule-Based Access Control | RuBAC | System rules / ACLs | Firewall rules, network ACLs |
Go deeper
Related to this question
About these practice questions
Courseiva writes every 350-701 question from scratch — 978 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 350-701 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-701 exam.