Figure 3 shows a LAN topology. Assume that no port security implemented on both switches. The administrator has assigned VLAN 50 for SMTP Server and VLAN 60 for Www Server. The attacker is trying to launch DOS attack towards the WWW Server with intention to make the server down. Analyze the topology and answer the following question. Questions: Attacker $1 802.10 Trunk S2 VLAN 60 Figure 3 VLAN 50 SMTP Server www Server a. Elaborate how the attacker can manipulate this network infrastructure to launch the DOS attack towards the WWW Server. b. As the network administrator, what will be your action to mitigate this exploit? Write the command(s) appropriately.

Figure 3 shows a LAN topology. Assume that no port security implemented on both switches. The administrator has assigned VLAN 50 for SMTP Server and VLAN 60 for Www Server. The attacker is trying to launch DOS attack towards the WWW Server with intention to make the server down. Analyze the topology and answer the following question. Questions: Attacker $1 802.10 Trunk S2 VLAN 60 Figure 3 VLAN 50 SMTP Server www Server a. Elaborate how the attacker can manipulate this network infrastructure to launch the DOS attack towards the WWW Server. b. As the network administrator, what will be your action to mitigate this exploit? Write the command(s) appropriately.

A+ Guide to Hardware (Standalone Book) (MindTap Course List)

9th Edition

ISBN:9781305266452

Author:Jean Andrews

Publisher:Jean Andrews

Chapter8: Connecting To And Setting Up A Network

Section: Chapter Questions

Problem 16RB

See similar textbooks

Similar questions

1. Which statement about ARP proxy is false ? The ARP proxy is also called promiscuous ARP or ARP hack . The RP proxy allows the hosts on the networks with the same network ID to communicate with each other . The ARP proxy , namely , the gateway , sends ARP request for the host . The MAC address in the ARP request packet is the MAC address of its own interface . The ARP proxy , namely , the gateway , sends ARP request for the host . The MAC address in the ARP request packet is the MAC address of the host .
After a breach in security, a network administrator is looking to restrict access to traffic across a network using a router. The administrator needs to block access to SSH on one host on Net 3 from all hosts on Net 1. All hosts on Net 2 should not be able to access any hosts on Net 4. All other traffic should be permitted. Using the following diagram as a basis. Write simple access control statements demonstrating how this can be achieved. Net 1 Net 3 Router Y 192.168.100.10 Net 2 192.168.101.10 Net 4 WWW 192.168.2.2 FILE 192.168.1.2
When setting up port forwarding on an external firewall to pass HTTP traffic from the Internet to an internal web server, the external address and port are 208.40.235.38:8080. What is the internal IP address and port, assuming the most common port for that protocol?
L
This Chain applies for all packets that are addressed to the firewall INPUT OUTPUT FORWARD This chain applies for all packets originating from firewall and going out of the server O INPUT ⒸOUTPUT FORWARD This chain applies for all packets passing through the firewall from other hosts on the network. The host with iptables is neither the source nor destination of the packet: mainly used to route packets through the machines on the network. INPUT OUTPUT Ⓒ FORWARD This jump target does not respond to a packet at all and does nothing with the packet. It an attack sends a packet. they would not get any response. ODROP ⒸREJECT This jump target responds with an ICMP Destination Unreachable back to the source. This indicates that a server exists, which is beneficial for troubleshooting and for attackers. DROP O REJECT
What does a cybersecurity analyst know about their target if they receive a RST packet back from a target host? The target is using UDP rather than TCP. The target expects the PSH flag to be set. The destination port is open on the target host. The source port in the RST message is closed. Which one of the following could a cybersecurity analyst enumerate using wpscan on a WordPress site? Administrators Plug-ins Posts Versions What program would a cybersecurity analyst use to enumerate services? enum4linux Nmap Snmpwalk Smbclient
You are troubleshooting an issue and you think that it is a problem with the DHCP server configuration. Client get an IP address, they can ping IP addresses on the same network and on the internet, but they cannot pull up webpages. What is a likely cause of misconfiguration on the DHCP server? a.) incorrect ntp server b.) incorrect dns server c.) incorrect gateway d.) incorrect subnet mask
Hi Just need answer, no need explanation What kind of firewall only checks packet header information in individual packets to make decisions? Circuit-level gateway Application proxy Guard Screening router What kind of IDS builds a model of acceptable behavior so it can flag exceptions? Signature based Misuse based Host based Anomaly based What kind of firewall operates at OSI Layer 5 and can be used to implement a VPN? Circuit-level gateway Application proxy Guard Screening router What kind of firewall can correlate data across packets? Circuit-level gateway Application proxy Stateful inspection Screening router Software that aggregates security event data from multiple sources across a network is called a(n) ___________. IDS SIEM Honeypot IPS
What are the advantages of placing cryptographic algorithms at the network layer? 1. Applying an authentication algorithm on an IP packet in the transport mode will affect routing this packet and so a gateway is not needed to route the packet. 2. It is impossible to obtain a port number from an encrypted IP packet in the transport mode. 3. Encrypting payloads only will make it impossible to analyze traffic. 4. Application-layer applications will not be affected by encryption or authentication algorithms. 5. Encrypted IP packets in the tunnel mode are not visible to the gateways on the routing path. 6. Applying an encryption algorithm on an IP packet in the tunnel mode will make it impossible to route this packet and so a gateway is needed to route the packet.
In which of the following ICMP messages, the possible sender is thedestination host. 1.type: destination unreachable,code: 0/1 – network/host is unreachable 2.type: destination unreachable,code: 2/3 – protocol/port is unreachable 3.type: redirection,code: 1–3 4.type: time exceeded,code: 0 (whenever a router decrements a datagram with a timeto-live value to zero, it discards the datagram and sends a time-exceededmessage (code 0) to the original source)
An attacker tries to do banner grabbing on a remote web server and executes the following command:$ nmap -sV hackme.com -p 80 He gets the following output:Starting Nmap 7.90 ( http://nmap.org ) at 2020-09-26 22:47 ESTNmap scan report for hackme.com (108.58.137.114)Host is up (0.048s latency).PORT STATE SERVICE VERSION80/tcp open http Apache httpdService detection performed. Please report any incorrect results at http://nmap.org/submit/.Nmap done: 1 IP address (1 host up) scanned in 7.36 seconds What did the hacker accomplish? nmap can’t retrieve the version number of any running remote service. The hacker successfully completed the banner grabbing. The hacker should have used nmap -O host.domain.com. The hacker failed to do banner grabbing as he didn’t get the version of the Apache web server.
Please fast solve