Network logs show repeated, unsolicited ARP replies mapping the gateway IP to a new MAC address. What attack does this indicate?

An attacker performs a MAC flooding attack to force a switch into a hub-like state, broadcasting traffic. What is the attacker's PRIMARY goal?

An attacker compromises one workstation and then uses it to access additional systems across the internal network. This behavior is known as:

Which control MOST directly limits lateral movement after a device is compromised?

Which segmentation technique isolates public-facing servers from the internal network?

A rogue wireless access point mimics a legitimate SSID to trick users into connecting. Which attack is this?

Which wireless defense MOST directly reduces the risk of an evil twin attack?

A firewall evaluates packets only based on source, destination, and port, without tracking sessions. This firewall is BEST described as:

A firewall rule set denies TCP port 443 traffic from 10.0.0.0/8 before allowing HTTPS traffic from all sources. Which change would allow HTTPS access?

Which tool collects logs from many sources and allows analysts to correlate events across the network?

Which detection method compares current behavior to a baseline to identify unusual activity?

Duplicate ARP replies appearing in network logs are MOST likely an indicator of:

Why does unsanitized user input increase the risk of injection attacks?

How does defense in depth reduce the impact of a successful network breach?