AP Cybersecurity topic 3.1
Network Vulnerabilities and Attacks
Networks carry data in packets between devices identified by IP and MAC addresses. Attacks include denial of service (flooding a target), on-path attacks (intercepting traffic), ARP and DNS spoofing (sending traffic to the wrong place), and scanning for open ports to find weak services.
Network Vulnerabilities and Attacks vocabulary
- DoS / DDoS: Overwhelming a system with traffic, from one source or many.
- On-path attack: An attacker secretly relays and possibly changes traffic between two parties.
- DNS spoofing: Giving out false DNS answers so a name leads to the attacker's server.
- Port scan: Probing a device to see which network services are listening.
AP-style practice questions
Try each one, then open the answer. To save your progress, take this quiz in the interactive course.
09:02:41 ARP reply: 10.0.5.1 is-at a4:5e:60:11:22:33 09:02:42 ARP reply: 10.0.5.1 is-at a4:5e:60:11:22:33 09:17:08 ARP reply: 10.0.5.1 is-at 08:00:27:de:ad:01 09:17:09 ARP reply: 10.0.5.1 is-at 08:00:27:de:ad:01
1. The address 10.0.5.1 is the network's router. Which of the following attacks is indicated by these log entries?
- (A) DNS poisoning
- (B) ARP poisoning
- (C) Evil twin
- (D) Smurf attack
Show answer
(B) ARP poisoning The router's IP address suddenly maps to a different MAC address, which means a device is claiming to be the router so traffic flows through it.
2. Which of the following is the most likely impact of the attack shown in the log?
- (A) The router will physically overheat
- (B) An adversary can intercept or alter traffic between devices and the router
- (C) All devices will receive new IP addresses
- (D) The Wi-Fi password will be reset
Show answer
(B) An adversary can intercept or alter traffic between devices and the router ARP poisoning creates an on-path position for eavesdropping or tampering.
3. An adversary sends thousands of fake MAC addresses to a network switch until it starts sending traffic out every port. Which attack is this?
- (A) MAC flooding
- (B) DNS poisoning
- (C) Phishing
- (D) Brute force
Show answer
(A) MAC flooding Overflowing the switch's address table makes it act like a hub, exposing traffic.
Network review, Harbor City Library A. Public catalog computers are on the same network as the payroll server B. Guest Wi-Fi uses WPA3 C. The printer's model number is printed on its case D. Staff laptops have screen locks enabled
4. Which finding represents the highest network risk?
- (A) Finding A
- (B) Finding B
- (C) Finding C
- (D) Finding D
Show answer
(A) Finding A Public machines sharing a network with payroll lets anyone who compromises a catalog computer reach sensitive systems.