GSLC · Question #467
Which of the following attacks allows the bypassing of access control lists on servers or routers, and helps an attacker to hide? Each correct answer represents a complete solution. Choose two.
The correct answer is B. IP spoofing attack C. MAC spoofing. IP spoofing and MAC spoofing both forge network identity information, allowing attackers to bypass address-based access controls and conceal their true origin.
Question
Which of the following attacks allows the bypassing of access control lists on servers or routers, and helps an attacker to hide? Each correct answer represents a complete solution. Choose two.
Options
- ADDoS attack
- BIP spoofing attack
- CMAC spoofing
- DDNS cache poisoning
How the community answered
(18 responses)- B94% (17)
- D6% (1)
Why each option
IP spoofing and MAC spoofing both forge network identity information, allowing attackers to bypass address-based access controls and conceal their true origin.
A DDoS attack floods a target with traffic to exhaust resources and cause a denial of service - it does not forge identity information or circumvent ACL entries.
IP spoofing forges the source IP address in packet headers, allowing attackers to bypass IP-based ACLs on routers and firewalls by impersonating trusted IP addresses that rules explicitly permit.
MAC spoofing forges the source MAC address of a network interface, enabling attackers to bypass MAC-based access control lists on switches and impersonate legitimate devices registered on the network.
DNS cache poisoning corrupts resolver caches to redirect users to malicious hosts - it does not forge packet-level addressing or directly bypass ACL rules on routers or servers.
Concept tested: IP and MAC spoofing to bypass access control lists
Source: https://www.cisco.com/c/en/us/support/docs/security-vpn/ios-firewall/13608-22.html
Topics
Community Discussion
No community discussion yet for this question.