Examkin

Soru

Zorluk: ZorCommon Network Attack Types and Vectors

A network security team investigates an incident where employees on a corporate LAN segment report intermittent connectivity drops and redirection to an untrusted portal. Network packet captures reveal two distinct anomalous activities: a rapid influx of DHCP DISCOVER frames generated using spoofed source MAC addresses to exhaust available IP pool leases, followed by unauthorized DHCP ACK messages directing hosts to use an attacker-controlled default gateway. Which TWO of the following attack types were executed during this incident?

  1. DHCP Starvation attackCevap
  2. Rogue DHCP server attack establishing an on-path positionCevap
  3. C
    DNS cache poisoning attack targeting external resolver records
  4. D
    MAC flooding attack targeting switch CAM tables

Cevap

The correct attack types involved are the DHCP Starvation attack and the Rogue DHCP server attack establishing an on-path position.
The incident combines DHCP starvation and a rogue DHCP server attack. Flooding DHCP DISCOVER packets with spoofed MAC addresses depletes the legitimate server's available IP leases. Once legitimate leases are exhausted, the attacker's rogue DHCP server responds to client requests with unauthorized IP parameters, setting the attacker's machine as the default gateway to intercept client traffic.

Adım Adım Çözüm

1
Analyze the first packet capture symptom involving spoofed source MAC addresses flooding DHCP DISCOVER frames.
Identify this mechanism as a DHCP Starvation attack, which depletes the legitimate DHCP pool.
Exhausting legitimate IP leases prevents valid clients from receiving IP configurations from the legitimate server.
2
Analyze the second packet capture symptom where unauthorized DHCP ACK responses supply an attacker-controlled default gateway IP.
Identify this mechanism as a Rogue DHCP server attack facilitating an on-path (Man-in-the-Middle) vector.
By answering DHCP requests after legitimate pool exhaustion, the rogue server assigns itself as the default gateway to intercept client traffic.

Anahtar Kavram

Identifying DHCP Starvation and Rogue DHCP On-Path Attack Vectors
Tahmini Süre:2m 0s
Bu soruyu puanla

Konular

Common Network Attack Types and Vectors

Bu konudan daha fazla soru