Question

Difficulty: EasyCommon Network Attack Types and Vectors

Match each network security threat to the primary mechanism or vector used to execute the attack.

  • Evil TwinDeploying an unauthorized wireless access point broadcasting a legitimate network SSID to intercept user credentials.
  • ARP PoisoningSending forged resolution responses onto a local segment to map a legitimate gateway IP address to an attacker's MAC address.
  • DNS Cache PoisoningInjecting fraudulent domain records into a resolver's storage to redirect traffic aimed at authentic web addresses.
  • VLAN HoppingTransmitting frames with double 802.1Q tags to bypass switch isolation and access restricted network segments.

Answer

Evil Twin matches deploying an unauthorized access point with a matching SSID; ARP Poisoning matches forging local resolution responses to map gateway IPs to an attacker MAC address; DNS Cache Poisoning matches injecting fraudulent records into a resolver's cache; VLAN Hopping matches sending double-tagged frames to cross switch VLAN boundaries.
Each attack type matches its specific operational vector: Evil Twin uses unauthorized wireless access points mimicking legitimate SSIDs; ARP Poisoning corrupts local Layer 2 MAC tables; DNS Cache Poisoning corrupts domain name lookup caches; VLAN Hopping manipulates 802.1Q switch trunking tags.

Step-by-Step Solution

1
Identify wireless layer threats
Evil Twin is recognized as a wireless rogue access point duplicating an authentic network SSID.
Evil Twin attacks specifically exploit wireless client auto-connect behaviors.
2
Differentiate local Layer 2 resolution attacks from remote Layer 7 resolution attacks
ARP Poisoning operates at Layer 2 via Ethernet MAC address manipulation, while DNS Cache Poisoning operates at Layer 7 via hostname-to-IP resolution records.
ARP targets local broadcast domains whereas DNS targets domain resolution caches.
3
Analyze switch trunking encapsulation attacks
VLAN Hopping leverages double 802.1Q tagging to traverse switch boundaries without a router.
Switches stripping the outer VLAN tag forward the packet into the inner targeted VLAN.

Key Concept

Common Network Attack Types and Vectors
Estimated Time:45s
Rate this question