Certified Ethical Hacker Network Security and Scanning 5

Question 1

What is ARP spoofing primarily used to achieve?

Accepted Answer

Redirecting traffic to the attacker for a man-in-the-middle attack

Answer

Encrypting LAN traffic

Answer

Assigning static IPs

Answer

Speeding up switching

Question 2

Which countermeasure best defends against ARP spoofing?

Accepted Answer

Dynamic ARP Inspection (DAI) on switches

Answer

Disabling ICMP

Answer

Closing all UDP ports

Answer

Increasing the TTL

Question 3

What does a MAC flooding attack attempt to do to a switch?

Accepted Answer

Overflow the CAM table so the switch behaves like a hub

Answer

Disable the firewall

Answer

Crack WPA2 keys

Answer

Spoof DNS records

Question 4

Which protocol is vulnerable to sniffing because it transmits credentials in cleartext?

Accepted Answer

Telnet

Answer

SSH

Answer

HTTPS

Answer

SFTP

Question 5

What is the goal of a DHCP starvation attack?

Accepted Answer

Exhaust the DHCP pool so legitimate clients cannot get addresses

Answer

Encrypt all DHCP traffic

Answer

Speed up address leasing

Answer

Disable ARP

Question 6

Which technique allows an attacker to monitor traffic on a switched network passively?

Accepted Answer

Port mirroring / SPAN port abuse

Answer

ICMP flooding

Answer

SYN flooding

Answer

Brute forcing SSH

Question 7

What is the primary defense against network sniffing of sensitive data?

Accepted Answer

Encrypting traffic with protocols like TLS/SSH

Answer

Using longer hostnames

Answer

Disabling logging

Answer

Increasing bandwidth