Certified Ethical Hacker CEH · Free Practice Question Medium
Question 88
- A The packet capture will provide the MAC addresses of other machines connected to the switch.
- B The packet capture will display all traffic intended for the default gateway.
- C The packet capture will only provide the MAC addresses of the laptop and the default gateway.
- D The packet capture will display all unicast messages intended for the laptop.
- E The packet capture will display all broadcast messages.
Reveal correct answers
Correct answers: A, D, E
Explanation
Correct Answers:
The packet capture will provide the MAC addresses of other machines connected to the switch, the packet capture will display all unicast messages intended for the laptop, and the packet capture will display all broadcast messages are correct.
Switches are designed to filter traffic—that is, they send traffic intended for a destination MAC only to the port that holds the MAC address as an attached host. The exception, however, is broadcast traffic and multicast traffic, which get sent out every port. Because ARP is broadcast in nature, all machines’ ARP messages would be viewable.
Incorrect Answers:
The packet capture will only provide the MAC addresses of the laptop and the default gateway, and the packet capture will display all traffic intended for the default gateway are incorrect.
The switch will filter traffic to the laptop, and MAC addresses will be available from the broadcast ARPs.
Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
