Home » Cisco » 210-260 » Which two statements describe DHCP spoofing attacks?
Which two statements describe DHCP spoofing attacks? (Choose Two.)
A. They can modify the flow of traffic in transit.
B. They can access most network devices.
C. They can physically modify the network gateway.
D. They are used to perform man-in-the-middle attacks.
E. They protect the identity of the attacker by masking the DHCP address.
F. They use ARP poisoning.
Correct Answer: AD
Explanation/Reference:
Explanation:
DHCP spoofing occurs when an attacker attempts to respond to DHCP requests and trying to list themselves (spoofs) as the default gateway or DNS server, hence, initiating a man in the middle attack.
With that, it is possible that they can intercept traffic from users before forwarding to the real gateway or perform DoS by flooding the real DHCP server with request to choke ip address resources. https://learningnetwork.cisco.com/thread/67229 https://learningnetwork.cisco.com/docs/DOC24355