CCST - Cisco Certified Support Technician Common Network Vulnerabilities Questions and Answers 1 — Questions and Answers
Question 1: What is the primary goal of a Denial of Service (DoS) attack against a network server?
- To steal sensitive data from the server's database.
- To exhaust the server's resources and make it unavailable to legitimate users. (Correct answer)
- To gain unauthorized administrative access to the server.
- To install malware on the server for long-term surveillance.
Correct answer: To exhaust the server's resources and make it unavailable to legitimate users.
A Denial of Service (DoS) attack aims to overwhelm a target system with traffic or malicious requests, consuming its resources (like CPU, memory, or bandwidth) so that it cannot respond to legitimate requests, effectively denying service to its users.
Question 2: A user on a public Wi-Fi network discovers that their online banking credentials have been compromised. The user suspects an attacker intercepted and relayed their communication with the bank's website without their knowledge. Which type of attack most likely occurred?
- VLAN hopping
- Distributed Denial of Service (DDoS) attack
- Man-in-the-Middle (MITM) attack (Correct answer)
- MAC spoofing
Correct answer: Man-in-the-Middle (MITM) attack
A Man-in-the-Middle (MITM) attack occurs when an attacker secretly intercepts and potentially alters the communication between two parties who believe they are directly communicating with each other. This is a common threat on unsecured public Wi-Fi networks where an attacker can position themselves between the user and the router.
Question 3: A network technician is reviewing a list of protocols currently in use. Which of the following protocols poses the most significant security risk because it transmits credentials and data in clear text?
- SSH (Secure Shell)
- Telnet (Correct answer)
- HTTPS (Hypertext Transfer Protocol Secure)
- SFTP (SSH File Transfer Protocol)
Correct answer: Telnet
Telnet is an older remote access protocol that transmits all data, including usernames and passwords, in unencrypted clear text. This makes it highly vulnerable to eavesdropping attacks. The other protocols listed (SSH, HTTPS, SFTP) all use encryption to protect data in transit.
Question 4: A network administrator implements port security on a switch, configured to allow only a single, specific MAC address on a port. An attacker, wanting to gain access, identifies the allowed MAC address and then modifies their own network card's MAC address to match it. What is this type of attack called?
- IP spoofing
- ARP poisoning
- MAC spoofing (Correct answer)
- DNS poisoning
Correct answer: MAC spoofing
MAC spoofing is the act of changing the factory-assigned Media Access Control (MAC) address of a network interface on a device. The attacker impersonates a legitimate device to bypass access control measures like port security or MAC filtering.
Question 5: An attacker connects their laptop to a switch port configured for a guest VLAN. By sending specially crafted frames, the attacker is able to gain access to the production server VLAN, bypassing the Layer 2 segmentation. What type of network attack does this describe?
- VLAN hopping (Correct answer)
- Man-in-the-Middle attack
- Denial of Service attack
- IP spoofing
Correct answer: VLAN hopping
VLAN hopping is a Layer 2 attack method that allows an attacker on one VLAN to gain unauthorized access to traffic on other VLANs. This is often accomplished through techniques like switch spoofing or double tagging to bypass the intended network segmentation.
Question 6: Which of the following represents a significant physical security vulnerability for a corporate network?
- Implementing WPA3 encryption on all wireless access points.
- Requiring multi-factor authentication for remote VPN access.
- Regularly updating router firmware to patch known exploits.
- Leaving a network wiring closet unlocked and accessible to unauthorized personnel. (Correct answer)
Correct answer: Leaving a network wiring closet unlocked and accessible to unauthorized personnel.
Physical security is a critical component of overall network security. An unlocked wiring closet allows an unauthorized individual to physically access switches, routers, and patch panels, which could lead to device theft, tampering, or the connection of rogue devices to the network. The other options are all examples of strong security practices.
CCST - Cisco Certified Support Technician Common Network Vulnerabilities Questions and Answers 1
What is the primary goal of a Denial of Service (DoS) attack against a network server?