Sniffing Defenses

Question 1

Sniffing Defenses

Answer 1

• Encryptions
• Secure Protocols
• Physical Security
• Static instead of Dynamic Protocols
• Use IPv6
• Promiscuous Scanning Tools

Question 2

Switch Defenses

Answer 2

• Enable port security
• DHCP Snooping
• Port-based MAC
• Dynamic ARP inspection
• Disable Trunk Auto-Negotiation
• Avoid using default VLAN
• Force native VLAN tagging
• BDPU guard/root guard

Question 3

DNS Defenses

Answer 3

• DNS Sec
• Block outbound traffic to UDP 53
• Restrict external DNS queries (whitelist/blacklist)