Common network protocols and vulnerabilities in Cybersecurity - Practice Problems & Coding Challenges

Challenge - 5 Problems

📋 Factual

intermediate

Identify the primary purpose of the TCP protocol

Which of the following best describes the main function of the TCP protocol in networking?

A It provides a connection-oriented communication ensuring reliable data transfer

B It assigns IP addresses dynamically to devices on a network

C It encrypts data to secure communication between devices

D It is used for broadcasting messages to all devices on a network

💡 Hint

Think about how TCP manages data packets between sender and receiver.

TCP (Transmission Control Protocol) establishes a connection and ensures data is delivered reliably and in order.

🧠 Conceptual

intermediate

Understanding the vulnerability of the DNS protocol

What is a common vulnerability associated with the DNS protocol that attackers exploit?

A DNS cache poisoning, where false DNS data is inserted to redirect users

B Man-in-the-middle attacks due to encrypted DNS queries

C Buffer overflow caused by oversized DNS packets

D SQL injection through DNS query parameters

💡 Hint

Consider how attackers can manipulate DNS responses to mislead users.

DNS cache poisoning involves inserting fake DNS entries into a resolver's cache, causing users to be redirected to malicious sites.

🔍 Analysis

advanced

Analyzing the impact of a SYN flood attack

What is the primary effect of a SYN flood attack on a network server?

A It exploits software bugs to gain unauthorized access to server files

B It exhausts server resources by initiating many half-open TCP connections, causing denial of service

C It injects malicious code into DNS responses to redirect traffic

D It intercepts and decrypts encrypted traffic between clients and servers

💡 Hint

Think about how TCP connection requests can be abused to overwhelm a server.

SYN flood attacks send many TCP connection requests without completing the handshake, using up server resources and preventing legitimate connections.

❓ Comparison

advanced

Comparing HTTP and HTTPS protocols

Which statement correctly distinguishes HTTPS from HTTP?

A HTTPS does not support cookies, HTTP does

B HTTP uses port 443 by default, HTTPS uses port 80

C HTTPS encrypts data using TLS/SSL, while HTTP sends data in plain text

D HTTP requires authentication, HTTPS does not

💡 Hint

Consider how data security differs between these two protocols.

HTTPS adds encryption with TLS/SSL to secure data transfer, unlike HTTP which sends data unencrypted.

❓ Reasoning

expert

Determining the vulnerability exploited by ARP spoofing

ARP spoofing attacks exploit which fundamental weakness in network protocols?

A The inability of ARP to resolve IPv6 addresses leading to address conflicts

B The encryption flaws in ARP messages that expose data to interception

C The use of static IP addresses that cannot be changed dynamically

D The lack of authentication in the ARP protocol allowing attackers to associate their MAC address with another IP

💡 Hint

Think about how ARP works and what security it lacks.

ARP does not verify the authenticity of replies, so attackers can send fake ARP messages to redirect traffic.