Certified Ethical Hacker Network Security and Scanning 5

Question 1

What is ARP spoofing primarily used to achieve?

Accepted Answer

Redirecting traffic to the attacker for a man-in-the-middle attack

Answer

ARP spoofing associates the attacker's MAC with another host's IP to intercept traffic in a MITM attack.

Question 2

Which countermeasure best defends against ARP spoofing?

Accepted Answer

Dynamic ARP Inspection (DAI) on switches

Answer

Dynamic ARP Inspection validates ARP packets against trusted bindings to block spoofed entries.

Question 3

What does a MAC flooding attack attempt to do to a switch?

Accepted Answer

Overflow the CAM table so the switch behaves like a hub

Answer

MAC flooding overflows the switch CAM table, forcing it to broadcast frames so the attacker can sniff them.

Question 4

Which protocol is vulnerable to sniffing because it transmits credentials in cleartext?

Accepted Answer

Telnet

Answer

Telnet sends usernames and passwords in cleartext, making them easy to capture via sniffing.

Question 5

What is the goal of a DHCP starvation attack?

Accepted Answer

Exhaust the DHCP pool so legitimate clients cannot get addresses

Answer

DHCP starvation floods the server with bogus requests to exhaust its address pool, denying service.

Certified Ethical Hacker Practice Test