Certified Ethical Hacker (CEH v12) — Question 18

Robin, a professional hacker, targeted an organization’s network to sniff all the traffic. During this process, Robin plugged in a rogue switch to an unused port in the LAN with a priority lower than any other switch in the network so that he could make it a root bridge that will later allow him to sniff all the traffic in the network.
What is the attack performed by Robin in the above scenario?

Answer options

• A. ARP spoofing attack
• B. STP attack
• C. DNS poisoning attack
• D. VLAN hopping attack

Correct answer: B

Explanation

The correct answer is B, STP attack, as Robin manipulated the Spanning Tree Protocol by introducing a rogue switch to become the root bridge, allowing him to control traffic flow. Option A, ARP spoofing attack, pertains to misleading ARP requests and responses, while C, DNS poisoning attack, involves corrupting DNS cache entries, and D, VLAN hopping attack, deals with bypassing VLAN segregation. None of these methods apply to the scenario described.