2.5 Describe Network Attacks, Such as Protocol-Based, Denial of Service, Distributed Denial of Service, and Man-In-The-Middle 200-201 Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   How does ARP spoofing enable a man-in-the-middle attack on a local network?

   • ABy modifying the DNS cache of the victim to redirect domain names to malicious IP addresses.
   • BBy sending ARP replies with the gateway's IP address to all hosts to block internet access.
   • CBy flooding the network with ARP requests to exhaust the switch's MAC address table.
   • DBy sending forged ARP replies to associate the attacker's MAC address with the victim's IP address, redirecting traffic through the attacker.
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A network analyst notices that a web server is intermittently unresponsive. During the incident, the server's connection table fills with half-open TCP connections that never complete the three-way handshake. The source IP addresses are spread across many different /24 subnets. Which type of attack is most likely occurring, and what is the primary resource being exhausted?

   • AA distributed TCP SYN flood exhausting the server's connection table
   • BA man-in-the-middle attack exhausting the server's memory
   • CA ping of death attack exhausting the server's CPU
   • DA single-source Smurf attack exhausting the server's network bandwidth
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   How does a typical DoS attack affect network availability?

   • AIt modifies routing tables so that traffic is sent to the wrong destination.
   • BIt corrupts data stored on the target server, making the information unusable.
   • CIt consumes finite resources such as bandwidth, memory, or processing power, causing legitimate requests to be dropped or delayed.
   • DIt encrypts the target's files and demands payment for decryption.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   What distinguishes a distributed denial-of-service (DDoS) attack from a single-source DoS attack?

   • AA DDoS attack always uses amplification techniques, while a DoS attack never does.
   • BA DDoS attack is always more severe than a DoS attack because it uses more bandwidth.
   • CA DDoS attack targets application-layer protocols, while a DoS attack only targets network-layer protocols.
   • DA DDoS attack uses multiple compromised systems to send traffic, while a single-source DoS attack originates from one system.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   An analyst is reviewing packet captures and sees a series of ICMP echo requests that are larger than the maximum allowed IP packet size. The packets are fragmented, and the receiving server crashes after reassembly. Which attack is this?

   • AARP spoofing, which redirects traffic
   • BSmurf attack, which uses broadcast amplification
   • CTCP SYN flood, which exhausts the connection table
   • DPing of death, which sends oversized ICMP packets to crash the target
   Reveal Solution Discussion Select an answer first