Soru

Zorluk: OrtaCommon Network Attack Types and Vectors

A network security administrator is analyzing recorded security incident logs and anomaly reports across enterprise infrastructure. Match each observed security incident on the left to the corresponding network attack vector on the right.

  • An influx of unexpected ICMP Echo Reply packets hits a targeted host after broadcast ICMP Echo Requests were sent with a spoofed source address.Smurf Attack
  • Traffic intended for an organization's public IP range is redirected through an unauthorized internet service provider via malicious route advertisements.BGP Hijacking
  • An attacker on an access port sends traffic encapsulated with nested 802.1Q headers to traverse a native VLAN trunk and reach a restricted segment.Double-Tagging VLAN Hopping
  • Encrypted web communications between a client and a server are transparently intercepted and converted to plain text HTTP sessions.SSL Stripping

Cevap

Incident 1 matches Smurf Attack, Incident 2 matches BGP Hijacking, Incident 3 matches Double-Tagging VLAN Hopping, and Incident 4 matches SSL Stripping.
Each attack vector directly aligns with its specific network manifestation: broadcast ICMP amplification reflects as a Smurf attack; forged routing prefix announcements constitute BGP hijacking; dual 802.1Q tag exploitation corresponds to double-tagging VLAN hopping; and interception that downgrades TLS/HTTPS to cleartext HTTP represents SSL stripping.

Adım Adım Çözüm

1
Analyze incident 1 involving ICMP Echo Reply flooding following a broadcast request.
Identify this mechanism as a Smurf attack.
Smurf attacks leverage ICMP broadcast amplification with a spoofed victim source address.
2
Analyze incident 2 involving malicious route announcements rerouting IP prefix traffic.
Identify this mechanism as Border Gateway Protocol (BGP) Hijacking.
Manipulating prefix announcements in BGP forces internet traffic through unauthorized Autonomous Systems.
3
Analyze incident 3 involving nested 802.1Q VLAN headers.
Identify this mechanism as Double-Tagging VLAN Hopping.
The outer tag matches the native VLAN and is removed by the switch, allowing the frame with the second tag to reach another VLAN without routing.
4
Analyze incident 4 involving the downgrade of encrypted HTTPS traffic to unencrypted HTTP.
Identify this mechanism as SSL Stripping.
SSL stripping forces secure web connections down to unencrypted HTTP so an on-path adversary can read data.

Anahtar Kavram

Common Network Attack Types and Vectors
Bu soruyu puanla