CompTIA Security+ SY0-601 – Question149

Security analysts are conducting an investigation of an attack that occurred inside the organization's network.
An attacker was able to collect network traffic between workstations throughout the network. The analysts review the following logs:

The Layer 2 address table has hundreds of entries similar to the ones above. Which of the following attacks
has MOST likely occurred?

A.
SQL injection
B. DNS spoofing
C. MAC flooding
D. ARP poisoning

Correct Answer: D