Network attacks 4.2

Question 1

Denial of Service

Answer 1

Overload service. Could be unintentional or a network issue.

Question 2

Distributed denial of service

Answer 2

Denial of service with botnet

Question 3

Vlan Hopping

Answer 3

Switching between different Vlans through switch spoofing or double tagging

Question 4

Switch spoofing

Answer 4

Pretending to be a switch to make a trunk connection and allowing a way into other vlans. Vulnerability with trunk negotiations

Question 5

Double tagging

Answer 5

Packet has two vlan tags which goes through one vlan, gets the tag removed, and goes to another. One-way, no info out.

Question 6

MAC flooding

Answer 6

Flood the limited MAC address table with many MAC addresses, forcing legitimate MAC addresses out and making traffic transmitted to all interfaces

Question 7

Spoofing

Answer 7

Faking

Question 8

ARP poisoning

Answer 8

IP Spoofing. Attacker intercepts ARP request and slips in their own device. Man in the middle

Question 9

DNS poisoning

Answer 9

DNS request spoofing. Similar to ARP poisoning but with DNS. Man in the middle

Question 10

Rogue DHCP server

Answer 10

DHCP isn’t inherently secure so an unauthorized server can assign IP addresses. Can be fixed with authorized DHCP servers and enabling DHCP snooping. Remove rogue server and renew IP leases

Question 11

Rogue AP

Answer 11

Unauthorized wireless access point. Potential weak entry point. Find with network scans and consider using network access control

Question 12

Wireless evil twin

Answer 12

SSID spoofing to try to capture wifi hotspot users

Question 13

Social engineering

Answer 13

Fooling users into giving information

Question 14

Shoulder surfing

Answer 14

Someone else looking at your screen while you’re unaware

Question 15

Tailgating/piggybacking

Answer 15

Using someone else’s entry, like getting in when someone else unlocks and opens a door

Question 16

Dumpster diving

Answer 16

Trash may have valuable information. Should be shredded

Question 17

Malware

Answer 17

Malicious software