210-250 · Question #165
Which two attacks can be caused by a rogue DHCP server? (Choose two.)
The correct answer is C. DoS E. MITM. A rogue DHCP server can cause denial of service by exhausting address pools and enable man-in-the-middle attacks by supplying malicious gateway or DNS settings.
Question
Which two attacks can be caused by a rogue DHCP server? (Choose two.)
Options
- ATrojan virus
- BCompromised-Key
- CDoS
- DTCP SYN flood
- EMITM
How the community answered
(33 responses)- A6% (2)
- B3% (1)
- C79% (26)
- D12% (4)
Why each option
A rogue DHCP server can cause denial of service by exhausting address pools and enable man-in-the-middle attacks by supplying malicious gateway or DNS settings.
A Trojan virus is malware delivered through deceptive software, not a network-layer attack resulting from a rogue DHCP server.
A compromised-key attack involves the theft or breaking of cryptographic keys, which is unrelated to DHCP operations.
A rogue DHCP server can cause a DoS condition by responding to client requests with invalid or duplicate IP configuration, preventing legitimate clients from obtaining working network settings. Additionally, if the rogue server exhausts the IP pool before the legitimate server can respond, clients receive no usable addresses at all.
A TCP SYN flood is a volumetric DoS attack exploiting TCP handshake mechanics, not caused by a rogue DHCP server.
A rogue DHCP server enables MITM attacks by providing clients with a fraudulent default gateway or DNS server address, causing all client traffic to flow through the attacker's machine where it can be intercepted and inspected.
Concept tested: Rogue DHCP server attack vectors
Source: https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst_asr901/software/release/12-2_54_sg/configuration/guide/scg/swdhcp82.html
Topics
Community Discussion
No community discussion yet for this question.