212-89 Exam QuestionsBrowse all questions from this exam

212-89 Exam - Question 72


What command does a Digital Forensic Examiner use to display the list of all IP addresses and their associated MAC addresses on a victim computer to identify the machines that were communicating with it:

Show Answer
Correct Answer: A

To display the list of all IP addresses and their associated MAC addresses on a victim computer, the appropriate command is 'arp'. The arp (Address Resolution Protocol) command is used to view the ARP table which maps the IP addresses to their respective MAC addresses. Other commands like 'netstat' and 'ifconfig' do not provide this specific mapping.

Discussion

1 comment
Sign in to comment
ColWilsonOption: B
May 13, 2024

"netstat -an" command

b9b2475
Jun 21, 2024

No. The question says "and their associated MAC addresses" and netstat shows IP and ports