14.1.3 Check Your Understanding – Identify Layer 2 Threats and Mitigation Measures Answers

1. What type of attack occurs when a threat actor sends packets with false MAC or IP addresses?

  • VLAN attacks
  • address spoofing
  • DHCP attacks
  • ARP attacks

Explanation: Address spoofing occurs when a threat actor sends packets that have false MAC or IP addresses.

2. What prevents many types of attacks including MAC table overflow attacks and DHCP starvation attacks?

  • IP Source Guard (IPSG)
  • DHCP Snooping
  • Dynamic ARP inspection (DAI)
  • Port Security

Explanation: Port Security prevents many types of attack including CAM table overflow attacks and DHCP starvation attacks.

3. What type of attack sends false address requests to a server until all addresses are used and none are available for legitimate users?

  • VLAN attack
  • address spoofing
  • DHCP attack
  • ARP attack

Explanation: DHCP attacks include DHCP starvation which is an attack in which false requests are made to a DHCP server until all available addresses are exhausted.

4. What prevents DHCP starvation and spoofing attacks?

  • IP Source Guard (IPSG)
  • Dynamic ARP Inspection (DAI)
  • Port Security
  • DHCP Snooping

Explanation: DHCP Snooping prevents DHCP starvation and DHCP spoofing attacks.

5. What prevents MAC and IP address spoofing attacks?

  • IP Source Guard (IPSG)
  • Dynamic ARP Inspection (DAI)
  • Port Security
  • DHCP Snooping

Explanation: IP Source Guard helps prevent MAC and IP address spoofing attacks.

Subscribe
Notify of
guest

0 Comments
Inline Feedbacks
View all comments
0
Would love your thoughts, please comment.x
()
x