A network security administrator is analyzing recorded security incident logs and anomaly reports across enterprise infrastructure. Match each observed security incident on the left to the corresponding network attack vector on the right.
- An influx of unexpected ICMP Echo Reply packets hits a targeted host after broadcast ICMP Echo Requests were sent with a spoofed source address.Smurf Attack
- Traffic intended for an organization's public IP range is redirected through an unauthorized internet service provider via malicious route advertisements.BGP Hijacking
- An attacker on an access port sends traffic encapsulated with nested 802.1Q headers to traverse a native VLAN trunk and reach a restricted segment.Double-Tagging VLAN Hopping
- Encrypted web communications between a client and a server are transparently intercepted and converted to plain text HTTP sessions.SSL Stripping
Cevap
Incident 1 matches Smurf Attack, Incident 2 matches BGP Hijacking, Incident 3 matches Double-Tagging VLAN Hopping, and Incident 4 matches SSL Stripping.
Each attack vector directly aligns with its specific network manifestation: broadcast ICMP amplification reflects as a Smurf attack; forged routing prefix announcements constitute BGP hijacking; dual 802.1Q tag exploitation corresponds to double-tagging VLAN hopping; and interception that downgrades TLS/HTTPS to cleartext HTTP represents SSL stripping.
Adım Adım Çözüm
Anahtar Kavram
Common Network Attack Types and Vectors