nerdexam
GIAC

GCIH · Question #33

Which of the following attacks come under the category of layer 2 Denial-of-Service attacks? Each correct answer represents a complete solution. Choose all that apply.

The correct answer is A. Spoofing attack B. SYN flood attack. Spoofing and SYN flood attacks are classified as Layer 2 DoS attacks, while password cracking and RF jamming fall into different attack categories entirely.

Incident Response & Cyber Kill Chain

Question

Which of the following attacks come under the category of layer 2 Denial-of-Service attacks? Each correct answer represents a complete solution. Choose all that apply.

Options

  • ASpoofing attack
  • BSYN flood attack
  • CPassword cracking
  • DRF jamming attack

How the community answered

(58 responses)
  • A
    93% (54)
  • C
    5% (3)
  • D
    2% (1)

Why each option

Spoofing and SYN flood attacks are classified as Layer 2 DoS attacks, while password cracking and RF jamming fall into different attack categories entirely.

ASpoofing attackCorrect

Spoofing attacks such as ARP spoofing and MAC address spoofing operate at Layer 2 (Data Link layer) by forging hardware or protocol addresses to disrupt or intercept network communications, making them a direct Layer 2 DoS vector.

BSYN flood attackCorrect

SYN flood attacks are grouped with lower-layer DoS techniques in many security frameworks because they exploit fundamental connection-state exhaustion at the network stack level, overwhelming a target and denying service to legitimate users.

CPassword cracking

Password cracking is a credential-based attack aimed at gaining unauthorized access, not a network-layer denial-of-service technique.

DRF jamming attack

RF jamming operates at Layer 1 (Physical layer) by disrupting radio frequency signals, not at Layer 2 of the OSI model.

Concept tested: Layer 2 denial-of-service attack classification

Source: https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/12-2SX/configuration/guide/book/layer2.html

Topics

#layer 2 attacks#SYN flood#spoofing#DoS

Community Discussion

No community discussion yet for this question.

Full GCIH Practice