Match each network attack to its principal mechanism: Attacks: 1. Packet sniffing 2. ARP spoofing 3. SYN flood 4. Distributed denial-of-service (DDoS) Mechanisms: A. Intercepting and inspecting network packets transmitted across a shared medium B. Sending forged Address Resolution Protocol messages to associate the attacker's MAC address with a target's IP address C. Sending a high volume of TCP connection requests while withholding the final ACK packets to exhaust connection tables D. Flooding a target with malicious traffic originating from numerous compromised hosts across the internet

### The pairs | Item | Matches | Why | |---|---|---| | Sniffing | Eavesdropping on network traffic | Sniffing observes transmitted data and may expose clear-text information. | | ARP spoofing | Falsifying a local address-to-hardware-address association | The false association can redirect traffic to the attacker. | | SYN flood | Leaving many TCP connection requests incomplete | Incomplete handshakes leave half-open connections that consume resources. | | Distributed denial-of-service | Using distributed traffic to consume target resources | Multiple sources can overwhelm bandwidth or application capacity. | ### Terms - **ARP**: Address Resolution Protocol, used to associate local network addresses with hardware addresses. - **TCP**: Transmission Control Protocol, which establishes a connection through a handshake. ### Remember Identify whether the attack observes, redirects, leaves connections pending, or overwhelms capacity.