MAC spoofing applies a legitimate MAC address to an unauthenticated host, which allows the attacker to pose as a valid user. Based on your understanding of ARP, what would indicate a bogus client?

The CEH exam is a 125-question multiple-choice exam. Candidates have four hours to complete the CEH exam.
Common CEH exam topics covered include: hacking methodologies, scanning methodologies, port scan types, and expected return responses. 
Knowing how to work with tools such as Nmap, Wireshark, Snort, OpenSSL, Netstat, and Hping will be handy.