GCIH · Question #143
Which of the following attacking methods allows the bypassing of access control lists on servers or routers, either hiding a computer on a network or allowing it to impersonate another computer by cha
The correct answer is D. MAC spoofing. MAC spoofing changes a network adapter's hardware address to impersonate another device or bypass MAC-based access controls on servers and routers.
Question
Which of the following attacking methods allows the bypassing of access control lists on servers or routers, either hiding a computer on a network or allowing it to impersonate another computer by changing the Media Access Control address?
Options
- AIP address spoofing
- BVLAN hoping
- CARP spoofing
- DMAC spoofing
How the community answered
(18 responses)- A6% (1)
- D94% (17)
Why each option
MAC spoofing changes a network adapter's hardware address to impersonate another device or bypass MAC-based access controls on servers and routers.
IP address spoofing falsifies the source IP address in packet headers to impersonate another host at the network layer, not the data-link layer MAC address used in ACL filtering.
VLAN hopping is an attack that allows traffic from one VLAN to reach another unauthorized VLAN by exploiting switch trunk port negotiation or double-tagging, not by changing a MAC address.
ARP spoofing sends forged ARP reply messages to associate an attacker's MAC address with a legitimate IP address in victims' ARP caches to intercept traffic, which is a different mechanism from changing the adapter's own MAC address.
MAC spoofing involves programmatically altering the Media Access Control address of a network interface to match that of another device. Because many access control lists on switches and routers filter traffic based on MAC addresses, changing the MAC allows an attacker to hide behind a trusted identity or bypass those controls entirely, which matches the description exactly.
Concept tested: MAC spoofing to bypass MAC-based access controls
Source: https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-access-restrict-clients-allowed-to-make-remote-sam-calls
Topics
Community Discussion
No community discussion yet for this question.