nerdexam
Cisco

210-250 · Question #165

Which two attacks can be caused by a rogue DHCP server? (Choose two.)

The correct answer is C. DoS E. MITM. A rogue DHCP server can cause denial of service by exhausting address pools and enable man-in-the-middle attacks by supplying malicious gateway or DNS settings.

Threats and Vulnerabilities

Question

Which two attacks can be caused by a rogue DHCP server? (Choose two.)

Options

  • ATrojan virus
  • BCompromised-Key
  • CDoS
  • DTCP SYN flood
  • EMITM

How the community answered

(33 responses)
  • A
    6% (2)
  • B
    3% (1)
  • C
    79% (26)
  • D
    12% (4)

Why each option

A rogue DHCP server can cause denial of service by exhausting address pools and enable man-in-the-middle attacks by supplying malicious gateway or DNS settings.

ATrojan virus

A Trojan virus is malware delivered through deceptive software, not a network-layer attack resulting from a rogue DHCP server.

BCompromised-Key

A compromised-key attack involves the theft or breaking of cryptographic keys, which is unrelated to DHCP operations.

CDoSCorrect

A rogue DHCP server can cause a DoS condition by responding to client requests with invalid or duplicate IP configuration, preventing legitimate clients from obtaining working network settings. Additionally, if the rogue server exhausts the IP pool before the legitimate server can respond, clients receive no usable addresses at all.

DTCP SYN flood

A TCP SYN flood is a volumetric DoS attack exploiting TCP handshake mechanics, not caused by a rogue DHCP server.

EMITMCorrect

A rogue DHCP server enables MITM attacks by providing clients with a fraudulent default gateway or DNS server address, causing all client traffic to flow through the attacker's machine where it can be intercepted and inspected.

Concept tested: Rogue DHCP server attack vectors

Source: https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst_asr901/software/release/12-2_54_sg/configuration/guide/scg/swdhcp82.html

Topics

#rogue DHCP#MITM#DoS#network attacks

Community Discussion

No community discussion yet for this question.

Full 210-250 Practice