ARP and DNS Security Quiz

What is the purpose of an ARP Request?

• To determine the MAC address of a host with a particular IP address

• To determine the IP address of a host with a particular MAC address

• To broadcast a DNS query to all hosts on the network

• To encrypt data packets on the network

What is a "gratuitous ARP"?

• An unsolicited ARP Reply sent by any client

• A request for a new IP address from the DHCP server

• A method to encrypt ARP messages

• A type of DNS attack

What vulnerability does ARP have?

• Any host can claim to be the owner of any IP/MAC they choose

• It can only be used on IPv4 networks

• It requires a secure connection to function

• It cannot be used on wireless networks

What is the goal of a threat actor in an ARP cache poisoning attack?

• To associate their MAC address with the IP address of the default gateway

• To encrypt all data packets on the network

• To disable all network connections

• To create a new subnet on the network

Which of the following is NOT a type of DNS attack mentioned?

• DNS tunneling attacks

• DNS stealth attacks

• DNS domain shadowing attacks

• DNS packet encryption attacks

What does MiTM stand for in network security?

• Man in The Middle

• Machine in The Middle

• Message in The Middle

• Monitor in The Middle

What is the purpose of a gratuitous ARP?

• To inform all other devices on the local network of the new device’s MAC address

• To request a new IP address from the DHCP server

• To encrypt ARP messages

• To initiate a DNS query

What is the purpose of DNS cache poisoning attacks?

• To increase the volume of DNS queries

• To redirect users from legitimate sites to malicious sites

• To hide the true source of an attack

• To consume resources of DNS open resolvers

What does the Double IP Flux technique involve?

• Changing DNS IP addresses continuously

• Rapidly changing the hostname to IP address mappings

• Consuming resources of DNS open resolvers

• Sending spoofed DNS messages

What is the main goal of DNS stealth attacks?

• To increase DNS query volume

• To hide the identity of threat actors

• To redirect users to malicious sites

• To consume DNS resolver resources