Question
As part of an attack, a threat actor purposefully overflows the content-addressable memory (CAM) table on a switch. Which of the following types of attacks is this scenario an example of?
- A. ARP spoofing
- B. Evil twin
- C. MAC flooding Correct
- D. DNS poisoning
Explanation
MAC flooding sends a large number of frames with fake source MAC addresses to fill the switch's CAM table. Once the table is full, the switch floods frames out all ports like a hub, letting the attacker capture traffic. ARP spoofing poisons host ARP caches, an evil twin is a rogue wireless access point, and DNS poisoning corrupts name resolution; none of them targets the CAM table.
