MCQs

Disclaimer:

Educational Use Only:

The website links provided are to be used strictly for educational and knowledge-gaining purposes only.

No Misuse:

Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.

Respect for Websites and Businesses:

Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.

Acknowledge Value of Knowledge:

Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.

No Endorsement:

The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.

User Responsibility:

By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.

MAC flooding attacks primarily target which type of network device?
a. Router
b. Switch
c. Firewall
d. Gateway
Answer: b. Switchjumpcloud+1
What layer of the OSI model does a MAC flooding attack exploit?
a. Network layer
b. Data Link layer
c. Transport layer
d. Application layer
Answer: b. Data Link layeruninets+1
What is another term for a MAC flooding attack?
a. SYN Flood
b. MAC Table Overflow attack
c. Ping of Death
d. ARP Spoofing
Answer: b. MAC Table Overflow attackwikipedia+1
What happens when a switch’s MAC table is full after a MAC flooding attack?
a. The switch reboots automatically
b. The switch drops all traffic
c. The switch enters broadcast mode
d. The switch ignores all unknown MAC addresses
Answer: c. The switch enters broadcast modehuntress+1
Which of the following statements correctly describes a MAC flooding attack?
a. Attacker floods router routing tables
b. Attacker sends fake MAC addresses to overflow the switch’s table
c. Attacker manipulates DNS cache
d. Attacker disrupts physical connections
Answer: b. Attacker sends fake MAC addresses to overflow the switch’s tablemacaddresslookup+1
What is the main goal of a MAC flooding attack?
a. To increase switch performance
b. To eavesdrop on network traffic
c. To upgrade switch firmware
d. To encrypt data
Answer: b. To eavesdrop on network trafficjumpcloud+1
In MAC flooding, what is the primary effect of switching to broadcast mode?
a. Traffic is dropped from unknown sources
b. All data becomes visible to every connected device
c. Network becomes faster
d. Firewalls block all packets
Answer: b. All data becomes visible to every connected devicehuntress+1
Which network equipment component stores MAC addresses?
a. ARP cache
b. Routing Table
c. CAM Table
d. NAT Table
Answer: c. CAM Tablemacaddresslookup+1
Which tool is commonly used to detect MAC flooding activity?
a. Wireshark
b. nmap
c. Metasploit
d. Aircrack-ng
Answer: a. Wiresharkjumpcloud
Which switching table behavior is exploited in a MAC flooding attack?
a. Static entry mapping
b. Dynamic learning of MAC addresses
c. ARP cache poisoning
d. VLAN tagging
Answer: b. Dynamic learning of MAC addressesuninets+1
A switch that is overwhelmed by fake MAC addresses is said to reach what condition?
a. Fail-Secure Mode
b. Fail-Open Mode
c. Protected Mode
d. Isolated Mode
Answer: b. Fail-Open Modemacaddresslookup+1
Which of the following best prevents MAC flooding attacks?
a. Port Security
b. DHCP Snooping
c. Static Routing
d. Password Authentication
Answer: a. Port Securityinterserver+1
Port Security limits what on a switch port?
a. Number of VLANs
b. Number of MAC addresses
c. Number of IP addresses
d. Number of packets per second
Answer: b. Number of MAC addressesinterserver+1
What happens when port security is configured and the MAC limit is exceeded?
a. Port shuts down
b. Data is dropped
c. Switch logs the event
d. All of the above depending on configuration
Answer: d. All of the above depending on configurationinterserver+1
MAC flooding is often a precursor to what type of attack?
a. ARP poisoning
b. Man-in-the-Middle (MITM) attack
c. SQL injection
d. CSRF
Answer: b. Man-in-the-Middle (MITM) attackhuntress+1
What type of packets does an attacker send during a MAC flooding attack?
a. ICMP packets
b. Ethernet frames with spoofed MAC addresses
c. HTTP GET requests
d. ARP replies
Answer: b. Ethernet frames with spoofed MAC addressesjumpcloud+1
A switch in broadcast mode behaves similarly to what device?
a. Hub
b. Router
c. Firewall
d. Proxy server
Answer: a. Hubuninets+1
Which cybersecurity principle does MAC flooding mainly violate?
a. Confidentiality
b. Integrity
c. Availability
d. Accountability
Answer: a. Confidentialityhuntress+1
What kind of attack category does MAC flooding fall under?
a. Denial of Service (DoS)
b. Malware injection
c. Social engineering
d. Insider threat
Answer: a. Denial of Service (DoS)sanfoundry+1
Which of the following countermeasures can segment networks to limit flood impact?
a. VLAN segmentation
b. NAT translation
c. Load balancing
d. VPN tunneling
Answer: a. VLAN segmentationjumpcloud
Dynamic ARP Inspection is used to prevent what related attacks?
a. DNS Spoofing
b. ARP Spoofing and Flooding
c. Port Scanning
d. SQL Injection
Answer: b. ARP Spoofing and Floodingjumpcloud
What is the typical result of MAC flooding on network performance?
a. Increased throughput
b. Network congestion and slowdown
c. Reduced bandwidth usage
d. Enhanced QoS management
Answer: b. Network congestion and slowdownhuntress+1
Which protocol operates above the MAC layer in the OSI model?
a. IP
b. ARP
c. ICMP
d. SMTP
Answer: a. IPwikipedia
What tool can ethical hackers use to test MAC flooding vulnerabilities?
a. macof
b. zenmap
c. ssh
d. tcpdump
Answer: a. macofinfosectrain+1
MAC flooding can be combined with what for advanced attacks?
a. Session hijacking
b. Address spoofing and sniffing
c. SQL querying
d. DNS caching
Answer: b. Address spoofing and sniffingmacaddresslookup+1
Which of the following terms refers to automatic clearing of old MAC entries?
a. Aging
b. Dropping
c. Refreshing
d. Timing out
Answer: a. Aginguninets
What is the capacity limit of a switch’s MAC table typically dependent on?
a. Firmware
b. Hardware memory
c. VLAN configuration
d. Encryption strength
Answer: b. Hardware memorywikipedia+1
Packet interception after MAC flooding can reveal what kind of data?
a. Session tokens and credentials
b. Server uptime
c. Port numbers only
d. CPU metrics
Answer: a. Session tokens and credentialshuntress+1
Which network logging method can help detect abnormal MAC activity?
a. Switch logs
b. Syslogs
c. DNS cache
d. DHCP leases
Answer: a. Switch logsjumpcloud
MAC flooding primarily affects which network scope?
a. Local Area Network (LAN)
b. Wide Area Network (WAN)
c. Internet backbone
d. Cloud Network
Answer: a. Local Area Network (LAN)uninets+1
Which switch defense mechanism allows only authorized devices?
a. MAC address filtering
b. IP whitelisting
c. DNSSEC
d. SSL certificates
Answer: a. MAC address filteringinterserver
What vulnerability characteristic does MAC flooding exploit?
a. Limited memory space
b. Outdated routing standards
c. ARP table corruption
d. Packet fragmentation
Answer: a. Limited memory spacemacaddresslookup+1
Which type of switch is most vulnerable to MAC flooding?
a. Unmanaged switch
b. Managed enterprise switch
c. Layer 3 switch
d. Router
Answer: a. Unmanaged switchhuntress
What is the main defense against unauthorized device access in switches?
a. Port security configuration
b. ARP poisoning
c. DHCP injection
d. DNS filtering
Answer: a. Port security configurationinterserver
What is one main challenge in detecting MAC flooding attacks early?
a. Stealthy and rapid table updates
b. High visibility to users
c. Logs are easy to trace
d. Static MAC lists
Answer: a. Stealthy and rapid table updatesjumpcloud
When a network acts as a hub, attackers can use which tool to capture traffic?
a. Wireshark
b. SSH
c. nmap
d. Netcat
Answer: a. Wiresharkhuntress+1
What key table does the MAC flooding attack focus on filling?
a. ARP Table
b. CAM Table
c. NAT Table
d. Routing Table
Answer: b. CAM Tablewikipedia+1
Which of the following is a long-term protection measure?
a. Regular network audits
b. Packet dropping
c. Port disabling
d. IP renumbering
Answer: a. Regular network auditsjumpcloud
The “Fail Open” state in switches means:
a. Switch stops forwarding frames
b. Switch broadcasts all frames
c. Switch rejects all MACs
d. Switch isolates attackers
Answer: b. Switch broadcasts all frameshuntress+1
What kind of network design can reduce attack spread?
a. VLAN segmentation
b. Flat topology
c. Daisy-chain
d. Full mesh
Answer: a. VLAN segmentationjumpcloud
Which attack type does MAC flooding indirectly support by exposing traffic?
a. Packet sniffing
b. IP spoofing
c. DDoS amplification
d. Worm injection
Answer: a. Packet sniffinghuntress+1
Attackers usually gain network access for MAC flooding by?
a. Physical connection or Wi-Fi compromise
b. IP injection
c. DNS spoofing
d. Route poisoning
Answer: a. Physical connection or Wi-Fi compromisemacaddresslookup
What is a major operational symptom of MAC flooding?
a. Unusual switch CPU usage and packet flooding
b. Low network utilization
c. Increased firewall response time
d. Router memory overflow
Answer: a. Unusual switch CPU usage and packet floodingjumpcloud
The main data interception goal in MAC flooding is to capture:
a. Plain-text login credentials
b. Unused IP ranges
c. Network hardware info
d. ARP packets only
Answer: a. Plain-text login credentialshuntress+1
Which acronym stands for the switch’s MAC address memory table?
a. CAM
b. SAM
c. RAM
d. PAM
Answer: a. CAMwikipedia+1
MAC flooding is ineffective over which networks?
a. Switched LANs
b. VPN tunnels
c. Broadcast LANs
d. Hub networks
Answer: b. VPN tunnelsjumpcloud+1
Which of the following does VLAN segmentation achieve?
a. Limits broadcast domain scope
b. Disables broadcast forwarding
c. Encrypts traffic
d. Enables faster switching
Answer: a. Limits broadcast domain scopejumpcloud
Which type of IDS best detects MAC flooding?
a. Network-based IDS
b. Host-based IDS
c. Signature-only IDS
d. Behavior-only IDS
Answer: a. Network-based IDSjumpcloud
What optimization can harden switches besides port security?
a. DHCP snooping
b. NAT translation
c. MAC cloning
d. DNS relaying
Answer: a. DHCP snoopingjumpcloud
How can administrators identify early MAC flooding attempts?
a. Monitor MAC learning rates and logs
b. Inspect encrypted traffic
c. Disable VLANs
d. Run file integrity checks
Answer: a. Monitor MAC learning rates and logsmacaddresslookup+1

Blog

Systemethic Technologies

Leave a Reply Cancel reply

Useful links

Other Terms & Policies

Contact Info