Which Windows command shows the ARP cache?

Prepare for the eLearnSecurity Junior Penetration Tester exam with our comprehensive quiz platform. Improve your skills with multiple-choice questions, detailed explanations, and exam tips. Get exam ready with ease!

Multiple Choice

Which Windows command shows the ARP cache?

Explanation:
The ARP cache stores mappings between IP addresses and MAC addresses on a local network, so a device can translate an IP to a hardware address when sending data. On Windows, you view this cache with the arp command using the -a option. This displays the ARP table for all interfaces, listing each known IP address, the corresponding MAC address (Physical Address), and whether the entry is dynamic or static. Other commands don’t show the ARP cache: ipconfig reveals IP configuration details (like IP address, subnet mask, gateway) but not ARP mappings; ip neigh is a Linux/UNIX command for neighbor discovery, not Windows; netstat -r shows the routing table, not ARP entries.

The ARP cache stores mappings between IP addresses and MAC addresses on a local network, so a device can translate an IP to a hardware address when sending data. On Windows, you view this cache with the arp command using the -a option. This displays the ARP table for all interfaces, listing each known IP address, the corresponding MAC address (Physical Address), and whether the entry is dynamic or static.

Other commands don’t show the ARP cache: ipconfig reveals IP configuration details (like IP address, subnet mask, gateway) but not ARP mappings; ip neigh is a Linux/UNIX command for neighbor discovery, not Windows; netstat -r shows the routing table, not ARP entries.

Subscribe

Get the latest from Examzify

You can unsubscribe at any time. Read our privacy policy