Examkin

Soru

Zorluk: OrtaCommon Network Attack Types and Vectors

Match each network attack vector to its primary technical mechanism or observed network anomaly.

  • Rogue DHCP ServerSends unauthorized IP configuration settings to client endpoints, redirecting network traffic to an attacker-controlled gateway.
  • TCP SYN FloodExhausts the connection backlog queue of a target host by sending half-open TCP requests with spoofed source addresses.
  • MAC FloodingOverflows a Layer 2 switch lookup memory table with random source address frames, forcing the switch into a broadcast state.
  • SSL/TLS StrippingIntercepts web communications to transparently downgrade encrypted HTTPS session requests to unencrypted HTTP.

Cevap

Rogue DHCP Server matches issuing unauthorized IP configuration settings to client endpoints; TCP SYN Flood matches exhausting the target host connection backlog queue with half-open requests; MAC Flooding matches overflowing the Layer 2 switch CAM table to force broadcast state; SSL/TLS Stripping matches downgrading HTTPS communications to unencrypted HTTP.
Each network attack vector targets a specific layer or operational protocol: Rogue DHCP misdirects network layer routing by spoofing configuration offers; TCP SYN floods exhaust transport layer state queues; MAC flooding saturates data link layer switch address tables; SSL/TLS stripping manipulates application/session layer encryption negotiation.

Adım Adım Çözüm

1
Identify the primary operational target and mechanism of a Rogue DHCP Server.
Rogue DHCP servers exploit client broadcast discovery to assign unauthorized gateway and DNS settings.
Clients accept configuration settings from the fastest responding DHCP offer on the network segment.
2
Analyze the impact of a TCP SYN Flood on system resources.
Flooding incomplete handshakes exhausts the target server backlog queue.
The server allocates state memory for each SYN request and waits for an ACK packet that never arrives.
3
Determine the effect of MAC Flooding on switch behavior.
Overwriting switch CAM table entries forces the switch into fail-open (hub-like) broadcast mode.
When the lookup table cannot store new MAC-to-port mappings, unicast frames are flooded out all ports to ensure delivery.
4
Evaluate the objective of SSL/TLS Stripping during proxy interception.
Forces encrypted web sessions down to unencrypted HTTP sessions.
The proxy rewrites secure HTTPS links and location headers before forwarding response content to the endpoint browser.

Anahtar Kavram

Common Network Attack Types and Vectors
Bu soruyu puanla

Konular

Common Network Attack Types and Vectors

Bu konudan daha fazla soru