Which attack specifically exhausts DHCP addresses by overwhelming the DHCP server with requests?

Which attack specifically exhausts DHCP addresses by overwhelming the DHCP server with requests?

• A. Rogue DHCP Server Attack
• B. ARP
• C. DHCP starvation attack
• D. Data Interception

Answer: (C)

Exhausting the DHCP pool is about depleting the number of IP addresses the DHCP server can lease. In a DHCP handshake, a client broadcasts a DHCPDISCOVER, the server offers an IP with DHCPOFFER, the client requests that IP with DHCPREQUEST, and the server acknowledges with DHCPACK. If an attacker floods the network with DHCPDISCOVER messages while spoofing many different MAC addresses, the server assigns leases to each new request until all available addresses are used up. When the pool is exhausted, legitimate devices can’t obtain an IP address, leading to denial of service for new connections. This tactic is known as a DHCP starvation attack because it starves the DHCP server of its address pool. Rogue DHCP server attacks involve introducing a malicious server to hand out incorrect network configuration, not specifically about exhausting the address pool. ARP-related attacks focus on manipulating address resolution to intercept or misdirect traffic, not on depleting DHCP addresses. Data interception refers to eavesdropping on traffic, not to DHCP address management.

Exhausting the DHCP pool is about depleting the number of IP addresses the DHCP server can lease. In a DHCP handshake, a client broadcasts a DHCPDISCOVER, the server offers an IP with DHCPOFFER, the client requests that IP with DHCPREQUEST, and the server acknowledges with DHCPACK. If an attacker floods the network with DHCPDISCOVER messages while spoofing many different MAC addresses, the server assigns leases to each new request until all available addresses are used up. When the pool is exhausted, legitimate devices can’t obtain an IP address, leading to denial of service for new connections. This tactic is known as a DHCP starvation attack because it starves the DHCP server of its address pool.

Rogue DHCP server attacks involve introducing a malicious server to hand out incorrect network configuration, not specifically about exhausting the address pool. ARP-related attacks focus on manipulating address resolution to intercept or misdirect traffic, not on depleting DHCP addresses. Data interception refers to eavesdropping on traffic, not to DHCP address management.