GCIH · Question #247
Adam has installed and configured his wireless network. He has enabled numerous security features such as changing the default SSID, enabling WPA encryption, and enabling MAC filtering on his…
The correct answer is C. MAC spoofing. The attacker cloned Adam's laptop MAC address to bypass MAC filtering, allowing unauthorized access to the wireless network.
Question
Adam has installed and configured his wireless network. He has enabled numerous security features such as changing the default SSID, enabling WPA encryption, and enabling MAC filtering on his wireless router. Adam notices that when he uses his wireless connection, the speed is sometimes 16 Mbps and sometimes it is only 8 Mbps or less. Adam connects to the management utility wireless router and finds out that a machine with an unfamiliar name is connected through his wireless connection. Paul checks the router's logs and notices that the unfamiliar machine has the same MAC address as his laptop. Which of the following attacks has been occurred on the wireless network of Adam?
Options
- ANAT spoofing
- BDNS cache poisoning
- CMAC spoofing
- DARP spoofing
How the community answered
(45 responses)- A9% (4)
- B18% (8)
- C71% (32)
- D2% (1)
Why each option
The attacker cloned Adam's laptop MAC address to bypass MAC filtering, allowing unauthorized access to the wireless network.
NAT spoofing is not a recognized attack matching this scenario; NAT operates at the network layer managing IP translation, not MAC address impersonation at the data link layer.
DNS cache poisoning corrupts a DNS resolver's cache to redirect domain lookups to malicious IPs, which is unrelated to MAC address duplication on a wireless router.
MAC spoofing occurs when an attacker changes their network adapter's MAC address to impersonate a legitimate device. In this scenario, the unfamiliar machine presents the same MAC address as Adam's laptop, bypassing the router's MAC filtering control. The shared bandwidth explains the reduced throughput, as two devices compete for the same wireless connection.
ARP spoofing associates an attacker's MAC address with a legitimate IP address on a LAN to intercept traffic, but the described attack involves cloning the MAC address itself to pass MAC filtering.
Concept tested: MAC spoofing to bypass wireless MAC filtering
Source: https://www.cisco.com/c/en/us/support/docs/lan-switching/ethernet/10601-32.html
Topics
Community Discussion
No community discussion yet for this question.