Which attack is described as an active sniffing technique used to steal and manipulate sensitive data?

Which attack is described as an active sniffing technique used to steal and manipulate sensitive data?

• A. Dynamic Host Configuration Protocol (DHCP)
• B. DHCP starvation attack
• C. DHCP attack
• D. Rogue DHCP Server Attack

Answer: (C)

The tactic being described is a DHCP attack. Attacks against DHCP exploit the dynamic host configuration protocol to control how clients are configured on the network. By compromising DHCP responses, an attacker can steer client traffic through their own device—often by presenting a rogue gateway or malicious DNS—enabling active interception and manipulation of data as it moves across the network. This makes it possible to sniff traffic and alter it in transit, which is the essence of the described active sniffing technique. DHCP itself is a protocol, not an attack, so simply referencing DHCP isn’t enough. A DHCP starvation attack focuses on exhausting the DHCP server’s pool of IP addresses and doesn’t inherently involve intercepting data. A rogue DHCP server attack is a specific method under the broader DHCP attack umbrella that achieves the same interception by providing faulty configuration, but the general term captures the broader category of manipulating DHCP to steal or tamper with data.

The tactic being described is a DHCP attack. Attacks against DHCP exploit the dynamic host configuration protocol to control how clients are configured on the network. By compromising DHCP responses, an attacker can steer client traffic through their own device—often by presenting a rogue gateway or malicious DNS—enabling active interception and manipulation of data as it moves across the network. This makes it possible to sniff traffic and alter it in transit, which is the essence of the described active sniffing technique.

DHCP itself is a protocol, not an attack, so simply referencing DHCP isn’t enough. A DHCP starvation attack focuses on exhausting the DHCP server’s pool of IP addresses and doesn’t inherently involve intercepting data. A rogue DHCP server attack is a specific method under the broader DHCP attack umbrella that achieves the same interception by providing faulty configuration, but the general term captures the broader category of manipulating DHCP to steal or tamper with data.