A security researcher discovers that malware on an infected system is manipulating ARP (Address Resolution Protocol) responses. At which OSI layer does this attack occur, and what is its impact on network communication?
ALayer 1; causes physical signal degradation
BLayer 2; enables MAC spoofing and man-in-the-middle attacks by mapping IP addresses to incorrect MAC addresses
CLayer 3; disrupts IP routing tables
DLayer 4; blocks port-based filtering
Correct Answer:
B. Layer 2; enables MAC spoofing and man-in-the-middle attacks by mapping IP addresses to incorrect MAC addresses
Explanation:
ARP operates at Layer 2 (Data Link Layer). ARP spoofing maps IP addresses to attacker-controlled MAC addresses, enabling man-in-the-middle attacks and traffic redirection.
A financial institution requires compliance with data protection regulations that mandate end-to-end encryption. At which OSI layer(s) should encryption be implemented to ensure comprehensive protection while maintaining optimal performance?
ALayer 1 only; encrypt all physical signals
BLayer 2 only; encrypt all frames
CLayers 6-7 for end-to-end encryption, with optional Layer 2 for link-level encryption
DLayer 4 only; encrypt all transport layer data
Correct Answer:
C. Layers 6-7 for end-to-end encryption, with optional Layer 2 for link-level encryption
Explanation:
End-to-end encryption is best implemented at Layer 6-7 (Presentation/Application) to ensure data remains encrypted from source to destination. Additional Layer 2 encryption protects link-level transmission.
In analyzing a network protocol stack, an engineer observes that data undergoes multiple transformations at different OSI layers before transmission. Which sequence correctly represents these transformations?
AData → Segments → Packets → Frames → Bits
BData → Packets → Segments → Frames → Bits
CBits → Frames → Packets → Segments → Data
DData → Frames → Packets → Segments → Bits
Correct Answer:
A. Data → Segments → Packets → Frames → Bits
Explanation:
The correct sequence during encapsulation is: Layer 7 (Data) → Layer 4 (Segments) → Layer 3 (Packets) → Layer 2 (Frames) → Layer 1 (Bits).
A network protocol analyzer shows that frames are arriving at a computer but being dropped at the Network Layer. What is the most likely cause?
APhysical cable disconnection
BIncorrect IP address or routing table entry
CMAC address table overflow
DApplication software crash
Correct Answer:
B. Incorrect IP address or routing table entry
Explanation:
If frames arrive at Layer 2 but are dropped at Layer 3, the issue involves IP addressing, routing tables, or network configuration at the Network Layer.
An organization implements network segmentation using VLANs. At which OSI layer does VLAN tagging primarily operate, and which layer processes these tags?
ALayer 4; Layer 3
BLayer 2; Layer 2
CLayer 3; Layer 4
DLayer 1; Layer 2
Correct Answer:
B. Layer 2; Layer 2
Explanation:
VLAN tagging operates at Layer 2 (Data Link Layer) using 802.1Q tags, and switches process these tags at Layer 2 to isolate traffic.
Consider a scenario where SSL/TLS encryption is implemented. At which OSI layer is the encryption applied, and through which layer does encrypted traffic pass without modification?
ALayer 4; Layers 1-3
BLayer 6; Layers 1-5
CLayer 7; Layers 1-6
DLayers 4-6; Layer 7 only
Correct Answer:
C. Layer 7; Layers 1-6
Explanation:
SSL/TLS operates at Layer 7 (Application Layer), encrypting application data. Lower layers (1-6) transparently carry encrypted data without understanding its content.
In a load-balancing scenario, traffic is distributed across multiple servers based on source IP addresses. At which OSI layer does this decision-making primarily occur?
AData Link Layer
BNetwork Layer
CTransport Layer
DApplication Layer
Correct Answer:
B. Network Layer
Explanation:
Load balancing based on IP addresses operates at the Network Layer (Layer 3) for Layer 3 load balancing, though advanced load balancers work at higher layers.
A network architect must design a system where two applications on the same computer communicate without leaving the system. Which OSI layers are bypassed in this internal communication?
ALayers 1 and 2
BLayers 2 and 3
CLayers 1, 2, and 3
DNo layers are bypassed; all are used
Correct Answer:
C. Layers 1, 2, and 3
Explanation:
Internal inter-process communication (IPC) bypasses physical transmission and network routing, skipping Layers 1-3, and operates at Layers 4-7.
When implementing network monitoring with packet sniffing at multiple layers, which combination accurately represents the data structures captured at each layer?
