Question

Difficulty: HardCommon Network Attack Types and Vectors

A network security analyst is reviewing logs and architecture reports following a series of coordinated security incidents across an enterprise environment. Match each network attack type on the left with its corresponding operational vector or primary mechanism on the right.

  • Deauthentication AttackSpoofing unauthenticated 802.11 management frames to force targeted client disconnects.
  • BGP Route HijackingMaliciously advertising unauthorized autonomous system IP prefixes to redirect Internet traffic.
  • DNS Amplification AttackExploiting open recursive resolvers with forged source IP headers to flood a target with large response payloads.
  • Evil Twin AttackDeploying a rogue access point with identical SSID and authentication parameters to harvest user credentials.

Answer

Deauthentication Attack matches spoofing unauthenticated 802.11 management frames; BGP Route Hijacking matches maliciously advertising unauthorized autonomous system IP prefixes; DNS Amplification Attack matches exploiting open recursive resolvers with forged source IP headers; Evil Twin Attack matches deploying a rogue access point with identical SSID and authentication parameters.
Each attack type is mapped directly to its defining vector: Deauthentication attacks send spoofed 802.11 management frames to force client disconnects; BGP route hijacking broadcasts false prefix advertisements to divert network traffic; DNS amplification uses open resolvers to magnify UDP traffic sent to a spoofed victim IP; and Evil Twin attacks establish unauthorized wireless access points using trusted SSIDs to harvest credentials.

Step-by-Step Solution

1
Analyze the mechanism of a Deauthentication Attack
Identified that it targets Layer 2 wireless management frames to break established client associations
Legacy 802.11 wireless management frames do not require authentication unless 802.11w Protected Management Frames are enforced
2
Analyze the mechanism of BGP Route Hijacking
Identified that it involves sending fraudulent BGP route announcements to alter Internet path selection
Border Gateway Protocol inherently trusts peer announcements unless secured with mechanisms such as RPKI
3
Analyze the mechanism of a DNS Amplification Attack
Identified that it is a reflection DDoS vector using open resolvers and spoofed UDP headers
Small DNS request packets with EDNS0 options generate disproportionately large response payloads sent to the victim's spoofed IP address
4
Analyze the mechanism of an Evil Twin Attack
Identified that it sets up a fraudulent wireless network mimicking a legitimate service set identifier
Wireless clients typically auto-connect to known SSIDs offering the highest signal strength

Key Concept

Identifying specific network security attack vectors across wireless, routing, and application infrastructure
Estimated Time:2m 0s
Rate this question