Question
Which of the following attacks utilizes a network packet that contains multiple network tags?
- A. MAC flooding
- B. VLAN hopping Correct
- C. DNS spoofing
- D. ARP poisoning
Explanation
VLAN hopping by double tagging places two 802.1Q tags in a frame: the first switch strips the outer tag that matches the native VLAN and forwards the frame, and the next switch reads the inner tag and delivers the frame into a VLAN the attacker should not reach. MAC flooding overwhelms a switch's MAC address table, DNS spoofing falsifies name resolution answers, and ARP poisoning sends forged ARP replies; none of them relies on multiple VLAN tags.
