Question 30
At a design studio in Berlin, engineers report that a packet capture shows Ethernet source addresses changing per hop and an analyst mistakes this for an IP spoofing event. The work affects wireless workstations and video conferences. What evidence should the engineer request after the repair?
Explanation
Correct Answer
This observation tests the Ethernet frame, VLAN and IP layer interpretation requirement at a design studio in Berlin. The expected result is that the packet path is explained by MAC learning and VLAN tags at Layer 2 or by destination-prefix lookup at Layer 3 as appropriate. The necessary correction is to separate MAC/VLAN switching behavior from IP subnet routing and inspect the correct header and forwarding table for the symptom; a saved configuration alone would not prove it is working. In this case, the observed fault is that a packet capture shows Ethernet source addresses changing per hop and an analyst mistakes this for an IP spoofing event.
Incorrect Answers
At a design studio in Berlin, this measures a different network requirement, BGP peer state and AS compatibility. The case describes that a packet capture shows Ethernet source addresses changing per hop and an analyst mistakes this for an IP spoofing event, so accepting this result would leave the primary fault without direct verification.
At a design studio in Berlin, this would verify 802.11, 802.1 and 802.3 protocol boundaries, not the failure reported in this scenario. The requested closure criterion instead concerns Ethernet frame, VLAN and IP layer interpretation: the packet path is explained by MAC learning and VLAN tags at Layer 2 or by destination-prefix lookup at Layer 3 as appropriate.
At a design studio in Berlin, the observation may be useful for a separate Layer-two edge protection and BPDU controls test, but it does not establish that a packet capture shows Ethernet source addresses changing per hop and an analyst mistakes this for an IP spoofing event has been resolved. The relevant check is the Ethernet frame, VLAN and IP layer interpretation outcome.