Ethical Hacking Essentials Practice Test

What technique involves sending non-broadcast ARP to detect nodes in promiscuous mode?

1. ARP Method

2. ARP Spoofing

3. SYN Attack

4. Smurf Attack

The correct answer is: ARP Method

The technique that involves sending non-broadcast ARP packets to detect nodes in promiscuous mode is often referred to as the ARP Method. This method capitalizes on the Address Resolution Protocol (ARP), which is used to find the MAC address associated with an IP address in the local network. When an attacker sends an ARP request to a specific IP that is not broadcast, they can observe which devices respond, indicating that they are capable of receiving this traffic. If a device is in promiscuous mode, it is configured to intercept and read all network packets, regardless of their destination, and potentially responds to the ARP request even if it is not the intended recipient of the traffic. This ability allows the attacker to discover systems operating under promiscuous mode within the network, which could indicate a monitoring or capturing device. The other choices present different methods or attacks that do not focus on ARP probing or detecting promiscuous mode. ARP Spoofing involves malicious attempts to associate an attacker's MAC address with the IP address of another entity, which is not directly aimed at discovering nodes in promiscuous mode. SYN Attack pertains to a method of exhausting server resources by sending a flood of SYN requests and not completing the TCP handshake