Examkin

Soru

Zorluk: OrtaNetwork and Wireless Attack Indicators

A security analyst is investigating several network and wireless security alerts recorded across an enterprise network. Match each observed technical attack indicator with its corresponding attack classification.

  • High RF noise floor across 2.4 GHz frequencies causing massive frame retransmissions and loss of wireless connectivityRadio Frequency (RF) Jamming
  • Multiple unsolicited ARP reply packets mapping different gateway IP addresses to a single rogue host MAC addressAddress Resolution Protocol (ARP) Poisoning
  • Unsolicited short-range wireless transmissions containing text messages sent to nearby discoverable mobile devicesBluejacking
  • A rogue access point broadcasting an identical corporate SSID but operating with a different BSSID and higher transmission powerEvil Twin

Cevap

RF Jamming matches high RF noise floor indicators; ARP Poisoning matches unsolicited ARP reply IP-to-MAC mappings; Bluejacking matches unsolicited Bluetooth messages; Evil Twin matches rogue APs broadcasting identical SSIDs with different BSSIDs.
Each technical indicator maps precisely to its corresponding attack vector based on network protocol behaviors and radio frequency characteristics.

Adım Adım Çözüm

1
Analyze physical wireless spectrum indicators.
Identify that elevated noise floors causing frame retransmissions and signal degradation correspond to RF Jamming.
Jamming directly injects RF noise onto wireless frequencies to disrupt communication channels.
2
Analyze Ethernet layer address resolution protocol traffic.
Identify that unsolicited ARP responses redirecting IP mappings to a target MAC correspond to ARP Poisoning.
An attacker sends gratuitous ARP replies to poison neighbor cache entries for man-in-the-middle positioning.
3
Analyze short-range mobile wireless message alerts.
Identify that sending unsolicited messages over Bluetooth without unauthorized data exfiltration corresponds to Bluejacking.
Bluejacking exploits Bluetooth OBEX push protocols to deliver unwanted messages to discoverable devices.
4
Analyze wireless access point parameters.
Identify that a rogue access point mimicking a legitimate SSID with an altered BSSID corresponds to an Evil Twin attack.
Evil Twin setups clone legitimate wireless network profiles to lure users into connecting and revealing credentials.

Anahtar Kavram

Network and Wireless Attack Indicators
Bu soruyu puanla

Konular

Network and Wireless Attack Indicators

Bu konudan daha fazla soru