What is the greatest danger from DHCP?
Suggested Answer: A
Get Premium SSCP Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
The greatest danger from BootP or DHCP (Dynamic Host Control Protocol) is from an intruder on the network impersonating a DHCP server and thereby misconfiguring the DHCP clients. Other choices are possible consequences of DHCP impersonation.
Source: STREBE, Matthew and PERKINS, Charles, Firewalls 24seven, Sybex 2000, Chapter 4: Sockets and Services from a Security Viewpoint.
12 comments · newest first
LE
Leontine
11 months ago
I think D is overblown, mail servers can be fixed easily.
JO
Johnetta
12 months ago
C is a huge issue too, wrong gateway can mess everything up.
LA
Lawrence
12 months ago
Wait, can multiple clients really have the same IP? Sounds risky!
GI
Giuseppe
12 months ago
I agree, A is the most dangerous.
YU
Yuonne
1 year ago
Definitely A, rogue DHCP servers are a big threat!
VI
Virgina
1 year ago
I thought the wrong default gateway was a concern, but now I’m leaning towards the impersonation risk being the greatest danger.
BE
Bernardine
1 year ago
I practiced a question similar to this, and I think option A makes the most sense since it can lead to a lot of misconfigurations.
GR
Gracie
1 year ago
I'm not entirely sure, but I feel like having duplicate IP addresses could cause major issues too.
MI
Millie
1 year ago
I remember studying DHCP vulnerabilities, and I think the biggest risk is definitely an unauthorized DHCP server messing things up.
VI
Vincenza
1 year ago
I'm a bit confused by the different authentication options presented here. I'll need to make sure I understand the differences between things like OAuth 2.0, named principal, and start authentication flow on save. I'll need to do some research to make sure I'm selecting the right approach.
EL
Elbert
1 year ago
I'm a bit confused on the difference between the options here. Is moving staff to other branches considered part of the damage control, or is it more of a recovery step? I'll have to think this through carefully.
WI
Wilford
1 year ago
Hmm, I'm a bit unsure about this one. I know Node.js is good for server-side JavaScript, but I'm not sure which specific benefits would be most convincing for the manager. I'll have to think this through carefully.