Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

ISC2 SSCP Exam - Topic 4 Question 14 Discussion

Posted by Jess on May 10, 2022 at 12:36 AM

What is the greatest danger from DHCP?

Suggested Answer: A

The greatest danger from BootP or DHCP (Dynamic Host Control Protocol) is from an intruder on the network impersonating a DHCP server and thereby misconfiguring the DHCP clients. Other choices are possible consequences of DHCP impersonation.

Source: STREBE, Matthew and PERKINS, Charles, Firewalls 24seven, Sybex 2000, Chapter 4: Sockets and Services from a Security Viewpoint.


Get Premium SSCP Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test
12 comments · newest first
LE
Leontine 11 months ago
I think D is overblown, mail servers can be fixed easily.
JO
Johnetta 12 months ago
C is a huge issue too, wrong gateway can mess everything up.
LA
Lawrence 12 months ago
Wait, can multiple clients really have the same IP? Sounds risky!
GI
Giuseppe 12 months ago
I agree, A is the most dangerous.
YU
Yuonne 1 year ago
Definitely A, rogue DHCP servers are a big threat!
VI
Virgina 1 year ago
I thought the wrong default gateway was a concern, but now I’m leaning towards the impersonation risk being the greatest danger.
BE
Bernardine 1 year ago
I practiced a question similar to this, and I think option A makes the most sense since it can lead to a lot of misconfigurations.
GR
Gracie 1 year ago
I'm not entirely sure, but I feel like having duplicate IP addresses could cause major issues too.
MI
Millie 1 year ago
I remember studying DHCP vulnerabilities, and I think the biggest risk is definitely an unauthorized DHCP server messing things up.
VI
Vincenza 1 year ago
I'm a bit confused by the different authentication options presented here. I'll need to make sure I understand the differences between things like OAuth 2.0, named principal, and start authentication flow on save. I'll need to do some research to make sure I'm selecting the right approach.
EL
Elbert 1 year ago
I'm a bit confused on the difference between the options here. Is moving staff to other branches considered part of the damage control, or is it more of a recovery step? I'll have to think this through carefully.
WI
Wilford 1 year ago
Hmm, I'm a bit unsure about this one. I know Node.js is good for server-side JavaScript, but I'm not sure which specific benefits would be most convincing for the manager. I'll have to think this through carefully.
0/2000 characters

Save Cancel