MCQs

Disclaimer:

Educational Use Only:

The website links provided are to be used strictly for educational and knowledge-gaining purposes only.

No Misuse:

Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.

Respect for Websites and Businesses:

Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.

Acknowledge Value of Knowledge:

Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.

No Endorsement:

The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.

User Responsibility:

By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.

1. What does DHCP stand for?
   a. Dynamic Host Configuration Protocol
   b. Dynamic Hardware Configuration Protocol
   c. Digital Host Control Protocol
   d. Direct Host Configuration Program
   Answer: aipxo
2. What is a rogue DHCP server?
   a. A DHCP server authorized by the administrator
   b. A DHCP server that is not under the control of network admins
   c. A backup DHCP server in case of failure
   d. A DHCP server on a different subnet
   Answer: bcommscope+1
3. What is the main function of a DHCP server?
   a. Encrypt network data
   b. Assign IP addresses and network configuration
   c. Protect against malware
   d. Generate network traffic reports
   Answer: bipxo
4. What can a rogue DHCP server cause on a network?
   a. Faster internet speeds
   b. IP address conflicts and connectivity issues
   c. More reliable communication
   d. Improved DNS resolution
   Answer: btechtarget+1
5. Which protocol is used by rogue DHCP servers to offer IP addresses?
   a. SMTP
   b. DHCP
   c. HTTP
   d. DNS
   Answer: bnotes.kodekloud
6. Which of the following is NOT a risk of rogue DHCP servers?
   a. Data interception
   b. Network traffic redirection
   c. Improved device security
   d. Denial of network access
   Answer: cgeeksforgeeks+1
7. What is usually the first step in a DHCP lease process?
   a. DHCP Release
   b. DHCP Discover
   c. DHCP ACK
   d. DHCP Decline
   Answer: bnotes.kodekloud+1
8. During a rogue DHCP attack, which information can be falsified?
   a. Default gateway
   b. DNS servers
   c. IP addresses
   d. All of the above
   Answer: dgeeksforgeeks+1
9. What can happen if multiple DHCP servers are present on a network?
   a. Guaranteed smooth operation
   b. Potential for conflicting IP assignments
   c. Faster IP address assignment
   d. No effect
   Answer: bauvik+1
10. Which type of attack uses a rogue DHCP server to intercept network traffic?
    a. Social engineering
    b. Man-in-the-middle
    c. Brute force
    d. DNS poisoning
    Answer: byoutubegeeksforgeeks
11. Why are rogue DHCP servers considered a security threat?
    a. They consume more bandwidth
    b. They can provide malicious configuration
    c. They reduce network latency
    d. They back up legitimate servers
    Answer: binfo-savvy+1
12. What is the primary goal of a rogue DHCP attack?
    a. To make network management easier
    b. To disrupt network services or redirect traffic
    c. To optimize DHCP options
    d. To speed up address allocation
    Answer: bnotes.kodekloud+1
13. Which tool can be used to detect rogue DHCP servers?
    a. Wireshark
    b. Excel
    c. Notepad
    d. Paint
    Answer: alearningnetwork.cisco+1
14. How does DHCP snooping help prevent rogue DHCP attacks?
    a. By encrypting IP traffic
    b. By blocking DHCP replies from untrusted ports
    c. By randomizing MAC addresses
    d. By hiding DNS requests
    Answer: bbaeldung+1
15. In network switches, how is a legitimate DHCP server typically designated?
    a. As an untrusted port
    b. As a DHCP option
    c. As a trusted port
    d. As a hidden device
    Answer: cjuniper+1
16. What network device is commonly targeted by a rogue DHCP server?
    a. Print server
    b. Client workstation
    c. Load balancer
    d. Patch panel
    Answer: btechtarget+1
17. If a client receives incorrect gateway information, what risk does it face?
    a. Increased security
    b. Data interception
    c. Reduced DHCP lease time
    d. Faster download speeds
    Answer: binfo-savvy+1
18. Which of the following is a manual method for detecting rogue DHCP servers?
    a. Disabling the main DHCP server and checking client IP assignment
    b. Running a disk defragmentation
    c. Updating antivirus software
    d. Resetting client passwords
    Answer: afortinet+1
19. What does the DHCP “Offer” message provide?
    a. An IP address and configuration details
    b. A password
    c. A network scan report
    d. Encryption keys
    Answer: aipxo+1
20. What is the impact of a rogue DHCP server on DNS resolution?
    a. No impact
    b. It can redirect DNS queries to malicious servers
    c. It speeds up DNS resolution
    d. It encrypts DNS queries
    Answer: binfo-savvy+1
21. Which setting should be documented to help prevent rogue DHCP incidents?
    a. The DHCP server location and configuration
    b. User browser history
    c. Video streaming preferences
    d. Printer toner levels
    Answer: aauvik
22. Which unauthorized scenario describes a rogue DHCP server?
    a. Legitimate server on the main subnet
    b. Device unknowingly set to provide DHCP services
    c. Patch panel configuration
    d. Backup domain controller
    Answer: bcommscope+1
23. Why might a rogue DHCP server remain undetected for a long time?
    a. Voice traffic masking
    b. Transparent proxying of traffic
    c. Network inactivity
    d. Automatic backup
    Answer: bauvik+1
24. Which network security feature helps detect rogue DHCP servers by monitoring traffic for DHCP responses?
    a. Intrusion detection system (IDS)
    b. Antivirus software
    c. VPN concentrator
    d. Print spooler
    Answer: abaeldung+1
25. What is a sign that a rogue DHCP server may be present on the network?
    a. IP address conflicts or network outages
    b. Faster device boot times
    c. Longer DHCP lease times
    d. Larger ARP tables
    Answer: ageeksforgeeks+1
26. Which step in DHCP communication follows the “Offer”?
    a. DHCP Decline
    b. DHCP Request
    c. DHCP Discover
    d. DHCP Finish
    Answer: bnotes.kodekloud+1
27. Which command can be used on Linux to release and renew DHCP leases?
    a. ifconfig
    b. dhclient
    c. netstat
    d. mount
    Answer: bnotes.kodekloud
28. Which type of switch port should be set as trusted for DHCP servers?
    a. All access ports
    b. The port hosting the legitimate DHCP server
    c. The port with the slowest connection
    d. All trunk ports
    Answer: bjuniper+1
29. Unauthorized devices giving out IP addresses are categorized as:
    a. Network printers
    b. Rogue DHCP servers
    c. Managed switches
    d. Wireless hotspots
    Answer: bmanageengine+1
30. If clients can’t obtain valid IP addresses, which issue is likely?
    a. Correctly functioning network segmentation
    b. Conflicting DHCP servers
    c. Unused port security
    d. DHCP over VPN
    Answer: btechtarget+1
31. What role does DHCP snooping play in a managed switch?
    a. Encrypts DHCP messages
    b. Monitors and allows DHCP responses only from trusted ports
    c. Expands DHCP address pool
    d. Multicasts DHCP packets
    Answer: bbaeldung+1
32. Which strategy is effective for preventing rogue DHCP servers using Active Directory?
    a. DHCP server authorization
    b. User password reset
    c. SNMP polling
    d. VLAN renumbering
    Answer: aauvik
33. What configuration error commonly leads to rogue DHCP servers appearing unintentionally?
    a. Misconfigured access point or switch
    b. Duplicate MAC addresses
    c. Server overclocking
    d. Port mirroring
    Answer: acommscope+1
34. What happens if a rogue DHCP server gives out the wrong subnet mask?
    a. No network effect
    b. Routing and connectivity problems
    c. Improved traffic efficiency
    d. Reduced broadcast domain
    Answer: bgeeksforgeeks+1
35. DHCP snooping can:
    a. Prevent unauthorized DHCP servers from responding to clients
    b. Lower network latency
    c. Encrypt all DHCP traffic
    d. Change physical switch layout
    Answer: abaeldung+1
36. Which packet does a client send to discover DHCP servers?
    a. DHCP Discover
    b. DNS Query
    c. ARP Probe
    d. SSL Handshake
    Answer: aipxo+1
37. What is the danger in setting all switch ports as trusted for DHCP?
    a. Only authorized servers can respond
    b. Rogue DHCP servers can operate freely
    c. All broadcast traffic is blocked
    d. It enables network segmentation
    Answer: bjuniper+1
38. Which utility can analyze packets to detect unauthorized DHCP offers?
    a. Wireshark
    b. WordPad
    c. VLC
    d. Spotify
    Answer: alearningnetwork.cisco+1
39. What does the ‘DHCP Request’ packet do?
    a. Requests lease renewal from preferred DHCP server
    b. Requests encryption key
    c. Requests ARP mapping
    d. Requests access to VLAN
    Answer: aipxo+1
40. What describes a properly secured DHCP network?
    a. All devices can issue DHCP offers
    b. Only administratively-authenticated DHCP servers can issue offers
    c. Every subnet must have a rogue DHCP
    d. DNS servers are undocumented
    Answer: bauvik+1
41. How do network admins know which DHCP servers are legitimate?
    a. By documentation and authorization
    b. By ARP poisoning
    c. By disabling DHCP snooping
    d. By enabling all ports
    Answer: atechtarget+1
42. Which option should be documented for DHCP security?
    a. Authorized DHCP MAC addresses
    b. DHCP log timestamps only
    c. DHCP snooping VLAN numbers
    d. All client ARP tables
    Answer: atechtarget+1
43. What is a direct consequence of a rogue DHCP server providing a bogus DNS server address?
    a. Clients cannot print
    b. Clients can be redirected to fake websites
    c. Longer lease times
    d. Unchanged network routing
    Answer: binfo-savvy+1
44. What command line tool on Linux might help detect DHCP traffic sources?
    a. tcpdump
    b. ls
    c. mv
    d. cd
    Answer: abaeldung
45. Which best practice helps reduce risk of rogue DHCP servers?
    a. Use DHCP snooping and trusted ports
    b. Disable DNSSEC
    c. Lower DHCP lease time
    d. Increase port speed
    Answer: aauvik+1
46. Which packet tells clients their DHCP request has been completed successfully?
    a. DHCP Lease
    b. DHCP ACK
    c. DHCP IRQ
    d. DHCP NAK
    Answer: bnotes.kodekloud+1
47. How might a network admin respond to detection of a rogue DHCP server?
    a. Remove or block the unauthorized device
    b. Increase DHCP lease duration
    c. Disable antivirus
    d. Lower domain priority
    Answer: afortinet+1
48. Which scenario increases risk of rogue DHCP on WiFi networks?
    a. Allowing any device to join and share
    b. Strict VLAN assignment
    c. DHCP snooping enabled
    d. MAC whitelisting only
    Answer: amanageengine+1
49. How do intrusion prevention systems (IPS) help with rogue DHCP?
    a. They scan and block malicious DHCP activity
    b. They provide DHCP addresses
    c. They extend lease times
    d. They back up IP address pools
    Answer: abaeldung
50. What does DHCP snooping database do?
    a. Records DHCP bindings to help enforce address allocation policies
    b. Encrypts all user traffic
    c. Authenticates BIOS firmware
    d. Checks switch fan speeds
    Answer: ajuniper+1

1. https://www.ipxo.com/blog/what-is-dhcp/
2. https://docs.commscope.com/bundle/unleashed-200.17-onlinehelp/page/GUID-2C0B6265-79B1-4D50-86EB-CD9B24E43CB1.html
3. https://www.manageengine.com/products/oputils/tech-topics/rogue-dhcp-servers.html
4. https://www.techtarget.com/searchnetworking/tip/What-is-a-rogue-DHCP-server
5. https://www.geeksforgeeks.org/ethical-hacking/what-is-rogue-dhcp-server-attack/
6. https://notes.kodekloud.com/docs/CompTIA-Security-Certification/Threats-Vulnerabilities-and-Mitigations/Demo-Rogue-DHCP
7. https://www.auvik.com/franklyit/blog/rogue-dhcp-server/
8. https://www.youtube.com/watch?v=eWVzteyRFYo
9. https://info-savvy.com/rogue-dhcp-server-attack/
10. https://learningnetwork.cisco.com/s/question/0D5Kd0000BkhwiiKQA/10-cyberops-associatelevel-multiplechoice-questions-mcqswhat-tool-can-detect-rogue-dhcp-serversa-wiresharkb-nmapc-netstatd-traceroute
11. https://www.baeldung.com/linux/dhcp-server-rogue
12. https://www.juniper.net/documentation/us/en/software/junos/security-services/topics/example/port-security-protect-from-rogue-dhcp-servers.html
13. https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-detect-ROGUE-DHCP-on-the-network/ta-p/280642
14. https://www.sanfoundry.com/computer-networks-questions-answers-dhcp/
15. https://easyexamnotes.com/dynamic-host-configuration-protocol-mcqs/
16. https://engineeringinterviewquestions.com/dhcp-objective-questions-and-answers/
17. https://www.scribd.com/document/564742072/This-set-of-Computer-Networks-Multiple-Choice-Questions
18. https://www.pynetlabs.com/dhcp-interview-questions-and-answers/
19. https://docs.commscope.com/bundle/zd-10.5.1-userguide/page/GUID-B1140484-F26B-4053-9B95-4C4E05FBF4F3.html
20. https://pentera.io/blog/dhcp-spoofing-101/