ECSA v10: EC-Council Certified Security Analyst v10

By ECCouncil · Question Mode

QuestionQ138

VerifiedNetwork Penetration Testing Methodology - Perimeter Devices

The security team discovered that a network switch had switched to learning mode and was operating like a hub. The switch’s CAM table was filled with unnecessary traffic. Someone attempted to penetrate the network space by attacking the network switches, then wrote a report and submitted it to higher authorities.

What type of attack did the attackers perform against the network switch?

Explanation

MAC flooding overwhelms a switch’s CAM table by injecting frames with numerous source MAC addresses. Once the table is exhausted, the switch may flood traffic through ports rather than forwarding it only to the learned destination port, causing hub-like behavior.

Community Discussion

No comments yet. Be the first to start the discussion!