Which of the following is a consequence of ARP spoofing?

• A. It can be prevented by static ARP entries
• B. It degrades performance
• C. It improves bandwidth
• D. It enhances security

Answer: (A)

ARP spoofing works by poisoning the ARP cache: forged ARP replies map the attacker’s MAC address to a legitimate IP, so traffic meant for another device goes to the attacker. A practical outcome of this technique is that static ARP entries can stop it. If ARP mappings are static, devices won’t accept dynamic ARP updates, so forged replies cannot alter the binding. That makes ARP spoofing ineffective, effectively preventing the attack. The other choices don’t describe a protective measure or outcome: spoofing doesn’t inherently improve bandwidth or security, and while it can cause disruption, static ARP entries are the direct way to mitigate it.