eJPT Network Attacks 2

Question 1

Which tool is most commonly used to perform a SYN flood DoS attack during a penetration test?

Accepted Answer

hping3

Answer

hping3 can craft and send large volumes of SYN packets to a target, making it the standard tool for SYN flood testing.

Question 2

What is the primary goal of an ARP cache poisoning attack?

Accepted Answer

Associate the attacker's MAC with a legitimate IP

Answer

ARP poisoning overwrites a victim's ARP cache so traffic destined for a legitimate IP is sent to the attacker's MAC address instead.

Question 3

During an MITM attack using Ettercap, what must be enabled on the attacker's Linux system for forwarded traffic to reach its destination?

Accepted Answer

IP forwarding via /proc/sys/net/ipv4/ip_forward

Answer

Without enabling IP forwarding, packets intercepted by the attacker are dropped instead of relayed, breaking connectivity and alerting victims.

Question 4

Which eJPT-relevant attack exploits the trust relationship between a DHCP client and server to redirect traffic?

Accepted Answer

DHCP spoofing (rogue DHCP)

Answer

A rogue DHCP server responds to client requests first, assigning itself as the default gateway to redirect all client traffic through the attacker.

Question 5

What Nmap flag is used to perform a NULL scan?

Accepted Answer

-sN

Answer

The -sN flag tells Nmap to send TCP packets with no flags set, which is the definition of a NULL scan.

(eJPT) eLearnSecurity Junior Penetration Tester Certification Practice Test