Attacking The Foundation

Which attack is being used when threat actors position themselves between a source and destination to transparently monitor, capture, and control the communication?

• Address Spoofing Attack

• ICMP Attack

• Session Hijacking

• MiTM Attack

• Amplification and Reflection Attacks

Which attack is being used when threat actors gain access to the physical network, and then use an MiTM attack to capture and manipulate a legitimate user’s traffic?

• ICMP Attack

• Session Hijacking

• MiTM Attack

• Amplification and Reflection Attacks

• Address Spoofing Attack

Which attack is being used when threat actors initiate a simultaneous, coordinated attack from multiple source machines?

• Amplification and Reflection Attacks

• Session Hijacking

• ICMP Attack

• MiTM Attack

• Address Spoofing Attack

Which attack is being used when threat actors use pings to discover subnets and hosts on a protected network, to generate flood attacks, and to alter host routing tables?

• ICMP Attack

• MiTM Attack

• Session Hijacking

• Address Spoofing Attack

• Amplification and Reflection Attacks

Which attack being used is when a threat actor creates packets with false source IP address information to either hide the identity of the sender, or to pose as another legitimate user?

• ICMP Attack

• Address Spoofing Attack

• Session Hijacking

• MiTM Attack

• Amplification and Reflection Attacks

Which attack exploits the three-way handshake?

• TCP reset attack

• DoS attack

• TCP SYN Flood attack

• TCP session hijacking

• UDP flood attack

Two hosts have established a TCP connection and are exchanging data. A threat actor sends a TCP segment with the RST bit set to both hosts informing them to immediately stop using the TCP connection. Which attack is this?

• TCP session hijacking

• TCP SYN Flood attack

• DoS attack

• TCP reset attack

• UDP flood attack

Which attack is being used when the threat actor spoofs the IP address of one host, predicts the next sequence number, and sends an ACK to the other host?

• TCP SYN Flood attack

• DoS attack

• UDP flood attack

• TCP session hijacking

• TCP reset attack

A program sends a flood of UDP packets from a spoofed host to a server on the subnet sweeping through all the known UDP ports looking for closed ports. This will cause the server to reply with an ICMP port unreachable message. Which attack is this?

• DoS attack

• TCP reset attack

• TCP SYN Flood attack

• UDP flood attack

• TCP session hijacking

What is the purpose of the TCP three-way handshake in an IPV4 network?

• To establish a reliable connection between two devices before data transmission.

• To resolve an IP address to a MAC address for communication.

• To fragment and reassemble packets during transmission.

• To route packets based on their destination IP address.