EC-Council Certified Ethical Hacker (CEH) Certification Practice Exam

Spoofing is about deceiving a system or user by pretending to be someone or something else, often to intercept traffic, misdirect requests, or evade detection. ARP spoofing works on the local network by sending forged ARP messages that link the attacker’s MAC address to the IP address of another device (like the gateway or a victim). This lets the attacker intercept or modify traffic between devices on the same LAN, creating a man-in-the-middle position. DNS spoofing involves deceiving name resolution so that a domain name resolves to a fraudulent IP address. This can be done by poisoning a DNS cache or by crafting forged DNS responses so users end up at attacker-controlled sites when they think they’re visiting a legitimate one. IP spoofing is when the source IP address in packets is forged to appear as though it came from a different machine. This is used to impersonate another host, evade traceability, or facilitate certain attack techniques like reflection or amplification. Because each technique involves falsifying information to impersonate or mislead a part of the network, all of these are spoofing methods.