nerdexam
GIAC

GCIH · Question #143

Which of the following attacking methods allows the bypassing of access control lists on servers or routers, either hiding a computer on a network or allowing it to impersonate another computer by cha

The correct answer is D. MAC spoofing. MAC spoofing changes a network adapter's hardware address to impersonate another device or bypass MAC-based access controls on servers and routers.

Reconnaissance, Scanning, and Enumeration

Question

Which of the following attacking methods allows the bypassing of access control lists on servers or routers, either hiding a computer on a network or allowing it to impersonate another computer by changing the Media Access Control address?

Options

  • AIP address spoofing
  • BVLAN hoping
  • CARP spoofing
  • DMAC spoofing

How the community answered

(18 responses)
  • A
    6% (1)
  • D
    94% (17)

Why each option

MAC spoofing changes a network adapter's hardware address to impersonate another device or bypass MAC-based access controls on servers and routers.

AIP address spoofing

IP address spoofing falsifies the source IP address in packet headers to impersonate another host at the network layer, not the data-link layer MAC address used in ACL filtering.

BVLAN hoping

VLAN hopping is an attack that allows traffic from one VLAN to reach another unauthorized VLAN by exploiting switch trunk port negotiation or double-tagging, not by changing a MAC address.

CARP spoofing

ARP spoofing sends forged ARP reply messages to associate an attacker's MAC address with a legitimate IP address in victims' ARP caches to intercept traffic, which is a different mechanism from changing the adapter's own MAC address.

DMAC spoofingCorrect

MAC spoofing involves programmatically altering the Media Access Control address of a network interface to match that of another device. Because many access control lists on switches and routers filter traffic based on MAC addresses, changing the MAC allows an attacker to hide behind a trusted identity or bypass those controls entirely, which matches the description exactly.

Concept tested: MAC spoofing to bypass MAC-based access controls

Source: https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-access-restrict-clients-allowed-to-make-remote-sam-calls

Topics

#MAC spoofing#ACL bypass#identity impersonation#network attacks

Community Discussion

No community discussion yet for this question.

Full GCIH Practice