Network Attacks (PenTest+) Quiz: ARP Spoof & Relay

1. In HTTP relay attacks, what vulnerability allows an attacker to forward requests through a legitimate server?

Proxy misconfiguration

DNS spoofing

SSL stripping

Cookie theft

2. Which network segmentation technique can mitigate the impact of ARP spoofing attacks?

VLAN isolation

Increasing bandwidth

Disabling ICMP

Enabling SNMP

3. In a relay attack on Kerberos authentication, the attacker intercepts tickets. What is the consequence?

Potential unauthorized access to network resources

Immediate system reboot

Automatic account lockout

Encryption key regeneration

4. What is the key advantage of using static ARP entries as a defense mechanism?

Static entries prevent ARP cache from being overwritten

They eliminate the need for DHCP

They increase network speed

They automatically detect intruders

5. In DNS relay attacks, an attacker redirects DNS queries to a malicious server. What is the attacker's primary goal?

To redirect users to fraudulent websites

To overload the DNS server

To delete DNS records

To encrypt DNS traffic

6. Which network monitoring tool can detect ARP spoofing by analyzing ARP traffic patterns?

Wireshark

Ping

Netstat

Route

7. What is the purpose of ARP cache poisoning in a network attack sequence?

To establish a foundation for traffic interception

To disable network adapters

To increase network latency

To corrupt the ARP protocol stack

8. In a relay attack targeting LDAP services, what does the attacker typically attempt to intercept?

Authentication credentials

System logs

Routing tables

MAC address tables

9. Which command-line tool is commonly used to perform ARP spoofing attacks on Linux systems?

Arpspoof

Nslookup

Tracert

Ifconfig

10. What is the primary risk of a successful ARP spoofing attack in a corporate network?

Unauthorized access to sensitive data in transit

Permanent deletion of network devices

Automatic network shutdown

Firmware corruption on routers

11. What does ARP stand for in network communications?

Address Resolution Protocol

Advanced Routing Protocol

Application Relay Protocol

Automated Request Processing

12. Which of the following is a common defense against ARP spoofing?

Enable port security on switches

Increase DHCP lease time

Disable IPv6 routing

Use stronger encryption

13. What does gratuitous ARP refer to?

An unsolicited ARP reply sent by a host

An ARP request with a null target

A broadcast ARP query

An ARP error message

14. In a relay attack scenario, the attacker intercepts traffic between two hosts. What type of attack pattern is this?

Man-in-the-middle (MITM)

Denial of service (DoS)

Session hijacking

Packet fragmentation

15. Which protocol can be used to authenticate ARP requests and prevent spoofing attacks?

VLAN tagging

ARP authentication (ARPAUTH)

Dynamic ARP Inspection (DAI)

IGMP snooping

16. What is the main difference between ARP spoofing and ARP poisoning?

ARP poisoning is persistent; spoofing is temporary

ARP spoofing uses TCP; poisoning uses UDP

There is no practical difference; terms are synonymous

Poisoning targets routers; spoofing targets hosts

17. In SMTP relay attacks, an attacker exploits an improperly configured mail server to send unauthorized emails. What is this vulnerability commonly called?

Open relay

Mail bombing

Spam filtering bypass

SMTP injection

18. Which layer of the OSI model is targeted by ARP spoofing?

Layer 2 (Data Link)

Layer 3 (Network)

Layer 4 (Transport)

Layer 7 (Application)

19. What is the primary goal of an ARP spoofing attack?

To perform man-in-the-middle interception

To crash the network

To disable DHCP servers

To flood the ARP cache

20. In an ARP spoofing attack, the attacker sends gratuitous ARP replies to associate their MAC address with which resource?

A legitimate user's IP address

The gateway's IP address

A broadcast domain

The attacker's own IP

Pentest Network Quiz: Can You Master ARP Spoof & Relay Attacks?