Soru

Zorluk: ZorNetwork Host Services and Server Roles

During a routine audit of a remote branch office, a network technician discovers that several newly installed IP security cameras fail to receive their server-directed configuration profiles upon boot. The cameras are assigned IP addresses in the 192.168.45.0/24 range with a short lease time, but they lack the custom Option 66 parameter pointing to the centralized provisioning server. Further investigation reveals an unauthorized wireless router plugged into a wall port on the same VLAN. Which of the following network host service issues is the MOST likely cause of this problem?

  1. A rogue DHCP server is responding to broadcast lease requests faster than the legitimate server and offering incomplete scope options.Cevap
  2. B
    The primary DNS server is failing to resolve the fully qualified domain name of the provisioning server for the IP cameras.
  3. C
    The cameras have defaulted to APIPA addressing because no local host service is available on the subnet.
  4. D
    The network firewall is blocking outbound traffic over TCP port 67 to the central provisioning server.

Cevap

A rogue DHCP server on the local subnet is responding to client broadcasts and delivering IP leases without required custom scope options such as Option 66.
When an unauthorized wireless router is connected to a network, its default DHCP service acts as a rogue server. Because DHCP broadcast requests are received by all hosts on the local layer 2 domain, the rogue server can respond faster than the legitimate server. Since consumer routers do not contain corporate scope options like Option 66 (TFTP server specification), devices receiving leases from the rogue server will gain network layer addressing but fail to locate their provisioning server.

Adım Adım Çözüm

1
Analyze the symptoms described in the ticket
Cameras receive valid IP addresses in the 192.168.45.0/24 subnet, but are missing DHCP Option 66 (TFTP boot server address).
Option 66 is a specific DHCP scope option used by network hosts like IP phones and cameras to locate configuration servers.
2
Evaluate the environmental finding
An unauthorized wireless router was connected directly to the local VLAN switch port.
Consumer wireless routers typically have built-in DHCP servers enabled by default on their LAN ports.
3
Correlate host service behavior with the unauthorized device
The unauthorized router's DHCP server responded to local DHCPDISCOVER broadcasts faster than the corporate DHCP server (or relay agent).
DHCP is a race condition; the client accepts the first DHCPOFFER received. The rogue server offered standard IP settings without the corporate Option 66 payload.

Anahtar Kavram

Rogue DHCP Server Identification and Scope Option Delivery
Bu soruyu puanla