Common Network Vulnerabilities Flashcards

What is the primary goal of a Denial of Service (DoS) attack against a network server?

Answer: To exhaust the server's resources and make it unavailable to legitimate users.

A Denial of Service (DoS) attack aims to overwhelm a target system with traffic or malicious requests, consuming its resources (like CPU, memory, or bandwidth) so that it cannot respond to legitimate requests, effectively denying service to its users.

A user on a public Wi-Fi network discovers that their online banking credentials have been compromised. The user suspects an attacker intercepted and relayed their communication with the bank's website without their knowledge. Which type of attack most likely occurred?

Answer: Man-in-the-Middle (MITM) attack

A Man-in-the-Middle (MITM) attack occurs when an attacker secretly intercepts and potentially alters the communication between two parties who believe they are directly communicating with each other. This is a common threat on unsecured public Wi-Fi networks where an attacker can position themselves between the user and the router.

A network technician is reviewing a list of protocols currently in use. Which of the following protocols poses the most significant security risk because it transmits credentials and data in clear text?

Answer: Telnet

Telnet is an older remote access protocol that transmits all data, including usernames and passwords, in unencrypted clear text. This makes it highly vulnerable to eavesdropping attacks. The other protocols listed (SSH, HTTPS, SFTP) all use encryption to protect data in transit.

A network administrator implements port security on a switch, configured to allow only a single, specific MAC address on a port. An attacker, wanting to gain access, identifies the allowed MAC address and then modifies their own network card's MAC address to match it. What is this type of attack called?

Answer: MAC spoofing

MAC spoofing is the act of changing the factory-assigned Media Access Control (MAC) address of a network interface on a device. The attacker impersonates a legitimate device to bypass access control measures like port security or MAC filtering.

An attacker connects their laptop to a switch port configured for a guest VLAN. By sending specially crafted frames, the attacker is able to gain access to the production server VLAN, bypassing the Layer 2 segmentation. What type of network attack does this describe?

Answer: VLAN hopping

VLAN hopping is a Layer 2 attack method that allows an attacker on one VLAN to gain unauthorized access to traffic on other VLANs. This is often accomplished through techniques like switch spoofing or double tagging to bypass the intended network segmentation.

Which of the following represents a significant physical security vulnerability for a corporate network?

Answer: Leaving a network wiring closet unlocked and accessible to unauthorized personnel.

Physical security is a critical component of overall network security. An unlocked wiring closet allows an unauthorized individual to physically access switches, routers, and patch panels, which could lead to device theft, tampering, or the connection of rogue devices to the network. The other options are all examples of strong security practices.