Objective 4.2

Question 1

Which type of attack overwhelms a server with excessive traffic, making it unavailable to users?
- Denial-of-Service (DoS)
- ARP poisoning
- VLAN hopping
- Exploit

Answer 1

Denial-of-Service (DoS) | Practical Use: Attackers flood a website until it crashes. | Explanation: DoS and DDoS overwhelm resources, preventing legitimate access. | Objective: 4.2 – Attacks | Follow-up Question: How does a DDoS differ from a DoS?

Question 2

Which attack allows traffic from one VLAN to be sent into another VLAN without authorization?
- DNS spoofing
- ARP poisoning
- VLAN hopping
- MAC flooding

Answer 2

VLAN hopping | Practical Use: Attackers bypass segmentation to reach sensitive VLANs. | Explanation: VLAN hopping exploits switch misconfigurations to cross VLAN boundaries. | Objective: 4.2 – Attacks | Follow-up Question: What’s one way to prevent VLAN hopping?

Question 3

Which attack floods a switch with fake MAC addresses, forcing it to act like a hub?
- Evil twin
- DNS poisoning
- ARP spoofing
- MAC flooding

Answer 3

MAC flooding | Practical Use: Attacker intercepts all traffic when a switch fails open. | Explanation: MAC flooding overwhelms CAM tables, causing broadcast behavior. | Objective: 4.2 – Attacks | Follow-up Question: How can port security mitigate MAC flooding?

Question 4

Which attack sends malicious ARP messages to link an attacker’s MAC with a legitimate IP address?
- Rogue DHCP
- ARP poisoning
- VLAN hopping
- DNS spoofing

Answer 4

ARP poisoning | Practical Use: Redirecting traffic intended for a server to the attacker. | Explanation: ARP poisoning allows interception or blocking of network traffic. | Objective: 4.2 – Attacks | Follow-up Question: What type of attack can ARP poisoning enable?

Question 5

Which technique involves sending falsified ARP messages to impersonate another host on a LAN?
- MAC flooding
- DNS poisoning
- Rogue AP
- ARP spoofing

Answer 5

ARP spoofing | Practical Use: Intercepting login credentials on a LAN. | Explanation: ARP spoofing links the attacker’s MAC to a victim’s IP. | Objective: 4.2 – Attacks | Follow-up Question: How does ARP spoofing differ from ARP poisoning?

Question 6

Which attack corrupts DNS cache to redirect users to malicious websites?
- VLAN hopping
- On-path attack
- DNS poisoning
- Evil twin

Answer 6

DNS poisoning | Practical Use: Redirecting a bank’s domain to a fake website. | Explanation: DNS poisoning changes DNS records to send users to rogue sites. | Objective: 4.2 – Attacks | Follow-up Question: How does DNS poisoning impact user trust in the internet?

Question 7

Which attack alters DNS records to redirect traffic to fraudulent websites?
- MAC flooding
- DNS spoofing
- DoS
- Rogue DHCP

Answer 7

DNS spoofing | Practical Use: Users are redirected to a phishing page that looks like Gmail. | Explanation: DNS spoofing tricks users into giving sensitive information. | Objective: 4.2 – Attacks | Follow-up Question: How is DNS spoofing related to phishing attacks?

Question 8

What is a rogue device?
- A corrupted DNS record
- A malicious firewall rule
- An unauthorized device connected to the network
- A self-signed certificate

Answer 8

An unauthorized device connected to the network | Practical Use: Rogue laptops or access points used by attackers. | Explanation: Rogue devices can manipulate or intercept traffic. | Objective: 4.2 – Attacks | Follow-up Question: Why are rogue DHCP servers dangerous?

Question 9

Which type of rogue device gives clients incorrect IP settings to reroute traffic?
- Rogue AP
- Rogue DHCP server
- Evil twin
- VLAN hopper

Answer 9

Rogue DHCP server | Practical Use: Clients unknowingly route traffic through an attacker’s system. | Explanation: Rogue DHCP servers assign malicious network configurations. | Objective: 4.2 – Attacks | Follow-up Question: How can DHCP snooping defend against rogue DHCP servers?

Question 10

Which rogue device pretends to be a legitimate Wi-Fi access point?
- Rogue AP
- DNS poisoning
- Evil twin
- Rogue DHCP

Answer 10

Rogue AP | Practical Use: Unauthorized Wi-Fi access to capture data. | Explanation: Rogue APs provide attackers access to network resources. | Objective: 4.2 – Attacks | Follow-up Question: What’s the difference between a rogue AP and an evil twin?

Question 11

Which attack creates a fake Wi-Fi hotspot with the same SSID as a legitimate one?
- VLAN hopping
- DNS spoofing
- Rogue AP
- Evil twin

Answer 11

Evil twin | Practical Use: Tricking users to connect and leak credentials. | Explanation: Evil twins impersonate trusted Wi-Fi networks. | Objective: 4.2 – Attacks | Follow-up Question: How can end users detect an evil twin?

Question 12

Which attack intercepts communication between two parties without their knowledge?
- Phishing
- On-path attack
- ARP poisoning
- VLAN hopping

Answer 12

On-path attack | Practical Use: Eavesdropping on sensitive emails. | Explanation: On-path attacks (MITM) allow interception and manipulation of data. | Objective: 4.2 – Attacks | Follow-up Question: How does HTTPS help prevent on-path attacks?

Question 13

What type of attack manipulates people instead of technology to gain access?
- Malware
- ARP poisoning
- Social engineering
- VLAN hopping

Answer 13

Social engineering | Practical Use: Tricking employees to share passwords. | Explanation: Social engineering exploits human trust. | Objective: 4.2 – Attacks | Follow-up Question: Why is social engineering often more effective than technical exploits?

Question 14

Which attack involves tricking users into revealing information through fake emails or messages?
- Tailgating
- Evil twin
- Dumpster diving
- Phishing

Answer 14

Phishing | Practical Use: Fake bank emails stealing login credentials. | Explanation: Phishing pretends to be a trusted entity. | Objective: 4.2 – Social engineering | Follow-up Question: What’s the difference between phishing and spear phishing?

Question 15

Which method involves attackers searching through discarded materials to find sensitive data?
- Shoulder surfing
- Dumpster diving
- Rogue device
- Malware

Answer 15

Dumpster diving | Practical Use: Retrieving shredded but readable documents. | Explanation: Dumpster diving finds confidential data in trash. | Objective: 4.2 – Social engineering | Follow-up Question: What’s one mitigation against dumpster diving?

Question 16

Which attack involves observing someone entering a password or PIN?
- Shoulder surfing
- Phishing
- On-path attack
- MAC flooding

Answer 16

Shoulder surfing | Practical Use: Looking over a shoulder at an ATM. | Explanation: Shoulder surfing directly observes credentials. | Objective: 4.2 – Social engineering | Follow-up Question: How can privacy screens reduce shoulder surfing risk?

Question 17

Which attack occurs when an unauthorized person follows an employee into a secure area?
- Rogue AP
- Dumpster diving
- Tailgating
- Evil twin

Answer 17

Tailgating | Practical Use: Attacker slips into a data center behind an employee. | Explanation: Tailgating exploits human trust to bypass physical security. | Objective: 4.2 – Social engineering | Follow-up Question: What physical controls help prevent tailgating?

Question 18

Which term describes malicious software designed to harm computers or networks?
- Malware
- Vulnerability
- Risk
- Exploit

Answer 18

Malware | Practical Use: Ransomware encrypting company files for payment. | Explanation: Malware includes viruses, worms, trojans, ransomware, spyware, and adware. | Objective: 4.2 – Attacks | Follow-up Question: What’s one difference between a virus and a worm?