LPI Exam Questions

What is most likely cause of this?

An administrator is capturing traffic with Wireshark and is only seeing ARP traffic. What is most likely cause of this?

A.
The network interface on which the scan is running is not promiscuous mode

B.
The mschine is on a switched network and is therefore only seeing local and braodcast/multicast packets

C.
The administrator did not enable the TCP and UDP option when starting the scan

D.
The network interface on which the scan is running has the ARP_ONLY flag set.