Computer Hacking Forensic Investigator (CHFI v10) — Question 509

When investigating a wireless attack, what information can be obtained from the DHCP logs?

Answer options

• A. The operating system of the attacker and victim computers
• B. IP traffic between the attacker and the victim
• C. MAC address of the attacker
• D. If any computers on the network are running in promiscuous mode

Correct answer: C

Explanation

The correct answer is C, as DHCP logs contain information about the MAC addresses of devices that connect to the network. Options A and B are incorrect because DHCP does not log operating system details or IP traffic directly. Option D is also incorrect since DHCP logs do not indicate promiscuous mode status.