312-49 · Question #455
When investigating a wireless attack, what information can be obtained from the DHCP logs?
The correct answer is C. MAC address of the attacker. DHCP logs record the MAC address of every device that requests an IP address lease from the DHCP server. When an attacker connects to a wireless network, their device broadcasts a DHCP request that includes its MAC address, which the server logs along with the assigned IP and…
Question
When investigating a wireless attack, what information can be obtained from the DHCP logs?
Options
- AThe operating system of the attacker and victim computersThe operating system of the attacker
- BIP traffic between the attacker and the victim
- CMAC address of the attacker
- DIf any computers on the network are running in promiscuous mode
How the community answered
(30 responses)- A3% (1)
- B7% (2)
- C90% (27)
Explanation
DHCP logs record the MAC address of every device that requests an IP address lease from the DHCP server. When an attacker connects to a wireless network, their device broadcasts a DHCP request that includes its MAC address, which the server logs along with the assigned IP and timestamp. MAC addresses are hardware-level identifiers that can help trace a specific network interface card back to a device or vendor. DHCP logs do not reveal the OS, capture IP traffic payloads, or detect promiscuous mode - those require other tools like OS fingerprinting, packet captures, or network scanners.
Topics
Community Discussion
No community discussion yet for this question.