Question

MAC flooding / CAM overflow:

Attacker generates towards of forged frames with intent to overwhelm the switches MAC table. This way the switch can no longer make intelligent forwarding decisions.

What can you enable to prevent this?
A) Port Security
B) VLAN Trunking
C) Spanning Tree Protocol
D) ARP Inspection

Answer 1

ARP Inspection is the option to enable in order to prevent MAC flooding / CAM overflow attacks.

Step-by-step explanation:

The option to prevent MAC flooding / CAM overflow attacks is ARP Inspection. ARP (Address Resolution Protocol) Inspection is a security feature that protects against ARP spoofing attacks by monitoring and verifying ARP requests and responses. When enabled, ARP Inspection validates the integrity of ARP packets, ensuring that only legitimate and valid ARP messages are allowed. This prevents attackers from flooding the switch with forged frames and overwhelming the MAC table.