CCST - Cisco Certified Support Technician Common Network Vulnerabilities Questions and Answers

Question 1

What is the primary goal of a Denial of Service (DoS) attack against a network server?

Accepted Answer

To exhaust the server's resources and make it unavailable to legitimate users.

Answer

A Denial of Service (DoS) attack aims to overwhelm a target system with traffic or malicious requests, consuming its resources (like CPU, memory, or bandwidth) so that it cannot respond to legitimate requests, effectively denying service to its users.

Question 2

A user on a public Wi-Fi network discovers that their online banking credentials have been compromised. The user suspects an attacker intercepted and relayed their communication with the bank's website without their knowledge. Which type of attack most likely occurred?

Accepted Answer

Man-in-the-Middle (MITM) attack

Answer

A Man-in-the-Middle (MITM) attack occurs when an attacker secretly intercepts and potentially alters the communication between two parties who believe they are directly communicating with each other. This is a common threat on unsecured public Wi-Fi networks where an attacker can position themselves between the user and the router.

Question 3

A network technician is reviewing a list of protocols currently in use. Which of the following protocols poses the most significant security risk because it transmits credentials and data in clear text?

Accepted Answer

Telnet

Answer

Telnet is an older remote access protocol that transmits all data, including usernames and passwords, in unencrypted clear text. This makes it highly vulnerable to eavesdropping attacks. The other protocols listed (SSH, HTTPS, SFTP) all use encryption to protect data in transit.

Question 4

A network administrator implements port security on a switch, configured to allow only a single, specific MAC address on a port. An attacker, wanting to gain access, identifies the allowed MAC address and then modifies their own network card's MAC address to match it. What is this type of attack called?

Accepted Answer

MAC spoofing

Answer

MAC spoofing is the act of changing the factory-assigned Media Access Control (MAC) address of a network interface on a device. The attacker impersonates a legitimate device to bypass access control measures like port security or MAC filtering.

Question 5

An attacker connects their laptop to a switch port configured for a guest VLAN. By sending specially crafted frames, the attacker is able to gain access to the production server VLAN, bypassing the Layer 2 segmentation. What type of network attack does this describe?

Accepted Answer

VLAN hopping

Answer

VLAN hopping is a Layer 2 attack method that allows an attacker on one VLAN to gain unauthorized access to traffic on other VLANs. This is often accomplished through techniques like switch spoofing or double tagging to bypass the intended network segmentation.

(CCST) Cisco Certified Support Technician Practice Test

(CCST) Cisco Certified Support Technician Practice Test

CCST - Cisco Certified Support Technician Common Network Vulnerabilities Questions and Answers