Examkin

Soru

Zorluk: OrtaCommon Network Attack Types and Vectors

An IT administrator investigating unexpected latency on a voice-over-IP (VoIP) network segment notices that host traffic destined for the default gateway IP address (10.20.4.110.20.4.1) is being redirected through an unauthorized host with MAC address `02:AB:C1:23:45:67`. Inspection of network captures reveals continuous unsolicited Gratuitous Address Resolution Protocol (GARP) frames originating from IP address 10.20.4.8810.20.4.88, associating its own physical address with 10.20.4.110.20.4.1. Which of the following network attack types is actively occurring on this segment?

  1. ARP PoisoningCevap
  2. B
    DNS Cache Poisoning
  3. C
    DHCP Spoofing
  4. D
    DNS Amplification

Cevap

ARP Poisoning is occurring because the attacker uses unsolicited GARP broadcasts to overwrite the Layer 2 cache entries of local devices.
The correct option correctly identifies ARP Poisoning because the attacker sends forged Gratuitous ARP packets to pollute the neighbor caches of local hosts, binding the gateway's IP address to the attacker's physical MAC address for traffic interception.

Adım Adım Çözüm

1
Analyze the protocol behavior described in the incident logs.
Unsolicited Gratuitous ARP (GARP) frames are mapping IP address 10.20.4.1 to MAC address 02:AB:C1:23:45:67.
Address Resolution Protocol operates at Layer 2 to map IPv4 logical addresses to physical MAC addresses.
2
Determine how local hosts handle these incoming frames.
Hosts update their internal ARP tables to send gateway traffic to the attacker's network interface.
Standard network nodes blindly update their ARP tables upon receiving ARP responses without validating prior request queries.
3
Identify the corresponding security attack classification.
This technique matches the operation of ARP Poisoning (or ARP Spoofing).
Manipulating Layer 2 neighbor discovery entries with spoofed MAC mappings is the core mechanism of ARP poisoning.

Anahtar Kavram

Common Network Attack Types and Vectors - ARP Poisoning
Bu soruyu puanla

Konular

Common Network Attack Types and Vectors

Bu konudan daha fazla soru