In the context of network security, what does STP manipulation primarily enable?

• A. Access control
• B. Traffic redirection to attacker
• C. Increased encryption
• D. DNS hijacking

Answer: (B)

STP manages how switches build a loop-free topology by electing a root bridge and determining which ports should forward or block traffic. If an attacker can send fake BPDU messages, they can trick switches into reselecting the root bridge or altering port roles. This reconfiguration can force traffic to flow over a link controlled by the attacker, effectively creating a man-in-the-middle path to intercept or observe traffic. This is why STP manipulation primarily enables traffic redirection to the attacker. It’s not about granting access control, increasing encryption, or hijacking DNS, which involve different mechanisms.