Describe TCP/IP Protocol Vulnerabilities 100-160 Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A network administrator is troubleshooting intermittent connectivity issues on a segment. The administrator runs a packet capture and sees a large number of ARP replies claiming that the gateway's IP address is associated with a MAC address that does not belong to the gateway. The administrator also sees UDP traffic sent to the broadcast address on port 67. Which two attacks are likely occurring?

   • ADNS cache poisoning to redirect traffic, and a SYN flood to overwhelm the gateway.
   • BDHCP starvation to exhaust the address pool, and a smurf attack to flood the network.
   • CARP spoofing to intercept traffic, and a rogue DHCP server to assign malicious configurations.
   • DICMP redirect to alter routing tables, and a UDP flood to exhaust the network.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A security analyst is reviewing web server logs and sees a series of requests that include JavaScript code in the URL parameters. The server is reflecting the input back in the response without sanitization. Which attack is the analyst most likely observing?

   • ACross-site scripting (XSS)
   • BDNS cache poisoning
   • CSYN flood
   • DARP poisoning
   Reveal Solution Discussion Select an answer first
4. 18expert · hard

   A security analyst is investigating a session hijacking attack on a web application. The analyst finds that the attacker was able to predict the TCP sequence numbers and inject packets into an established session. The application uses HTTP without encryption. Which two vulnerabilities were exploited?

   • ATCP uses a three-way handshake that can be bypassed, and DNS cache poisoning can redirect the session.
   • BICMP redirects can alter routing, and DHCP can assign a malicious gateway.
   • CTCP sequence numbers are predictable, and HTTP transmits session tokens in plaintext.
   • DUDP is connectionless and can be spoofed, and ARP spoofing can redirect the session.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   Which attack exploits ARP's lack of authentication to associate an attacker's MAC address with the IP address of a legitimate host?

   • AARP spoofing
   • BDHCP starvation
   • CDNS cache poisoning
   • DTCP session hijacking
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   What is the primary risk of a rogue DHCP server on a network?

   • AIt can alter DNS records on the DNS server
   • BIt can assign malicious configuration, such as a rogue default gateway, to clients
   • CIt can corrupt the ARP cache
   • DIt can cause a TCP SYN flood
   Reveal Solution Discussion Select an answer first