nerdexam
GIAC

GCFA · Question #57

By gaining full control of router, hackers often acquire full control of the network. Which of the following methods are commonly used to attack Routers? Each correct answer represents a complete…

The correct answer is B. By launching Max Age attack C. Route table poisoning D. By launching Sequence++ attack. Routers can be compromised through STP manipulation, routing table corruption, and sequence number exploitation - all of which target router protocols directly rather than human users.

Advanced Incident Response & Digital Forensics Fundamentals

Question

By gaining full control of router, hackers often acquire full control of the network. Which of the following methods are commonly used to attack Routers? Each correct answer represents a complete solution. Choose all that apply.

Options

  • ABy launching Social Engineering attack
  • BBy launching Max Age attack
  • CRoute table poisoning
  • DBy launching Sequence++ attack

How the community answered

(49 responses)
  • A
    20% (10)
  • B
    80% (39)

Why each option

Routers can be compromised through STP manipulation, routing table corruption, and sequence number exploitation - all of which target router protocols directly rather than human users.

ABy launching Social Engineering attack

Social engineering targets human users through psychological manipulation rather than directly exploiting router protocols or firmware, making it a general people-focused attack vector rather than a router-specific technical attack method.

BBy launching Max Age attackCorrect

The Max Age attack targets Spanning Tree Protocol by sending crafted BPDU frames with a manipulated MaxAge value, forcing switches to flush their topology tables and potentially allowing the attacker to claim the root bridge role and redirect network traffic.

CRoute table poisoningCorrect

Route table poisoning involves injecting false routing entries into a router's table via vulnerable routing protocols such as RIP or BGP, causing the router to forward traffic through attacker-controlled paths.

DBy launching Sequence++ attackCorrect

The Sequence++ attack manipulates TCP or BGP session sequence numbers to hijack established routing sessions, enabling the attacker to inject malicious routing updates or terminate legitimate routing peer communications.

Concept tested: Router-specific network attack methods

Source: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_data_acl/configuration/xe-16/sec-data-acl-xe-16-book/sec-layer2-sec.html

Topics

#router attacks#route table poisoning#Max Age attack#network exploitation

Community Discussion

No community discussion yet for this question.

Full GCFA Practice