Describe TCP/IP Protocol Vulnerabilities 100-160 Practice Questions (Page 7)

Questions 31–35

1. 31application · medium

   A network engineer is analyzing a DDoS attack that is consuming all available bandwidth. The attack traffic consists of large UDP packets sent to random ports on the victim's IP address. The source IP addresses appear to be spoofed. Which characteristic of UDP makes this type of attack easy to launch?

   • AUDP is connectionless and does not require a handshake
   • BUDP uses a three-way handshake
   • CUDP requires the receiver to acknowledge every packet
   • DUDP provides built-in encryption
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   Which TCP attack occurs when an attacker predicts the sequence numbers of an established connection to inject malicious packets and take over the session?

   • ADHCP starvation
   • BSYN flood
   • CPing flood
   • DSession hijacking
   Reveal Solution Discussion Select an answer first
4. 33foundation · easy

   Which ICMP-based attack uses a spoofed source address to send echo requests to a broadcast address, causing all hosts on the network to reply to the victim?

   • AICMP timestamp attack
   • BPing of death
   • CSmurf attack
   • DICMP redirect attack
   Reveal Solution Discussion Select an answer first
5. 34application · medium

   A network administrator is investigating a large volume of DNS responses arriving at the company's public DNS server from many different sources. The responses are much larger than the queries that were sent. Which protocol characteristic is being exploited in this attack?

   • ADNS's use of port 53 for both TCP and UDP
   • BTCP's three-way handshake requirement
   • CUDP's lack of a handshake and source address validation
   • DICMP's echo request and reply mechanism
   Reveal Solution Discussion Select an answer first
6. 35expert · hard

   A network administrator is securing a small office network that uses a flat Layer 2 topology. The administrator is concerned about ARP spoofing, rogue DHCP servers, and DNS spoofing. The network has a limited budget and the administrator cannot replace the existing switches. Which combination of controls is most effective?

   • AEnable port security on the switches and use a DNS firewall.
   • BDeploy a firewall between the network and the internet and use a public DNS resolver.
   • CUse a VLAN to separate traffic and implement DNS over HTTPS on all clients.
   • DImplement static ARP entries on critical hosts, enable DHCP snooping on the switches, and configure DNSSEC on the DNS server.
   Reveal Solution Discussion Select an answer first