ITPEC FE Morning April 2020 Question 38

Source exam: ITPEC FE Morning April 2020Topic: Security

ITPEC FE Morning April 2020 — Question 38 of 80

DHCP Starvation Attack — an attacker floods the DHCP server with fake requests to exhaust the IP address pool.

How it works:
- Attacker sends massive number of DHCP Discover messages with spoofed MAC addresses

- Each request leases a different IP from the pool

- Pool gets fully exhausted → legitimate clients cannot obtain IP addresses

Why not others:
- (a) DHCP MAC filtering — a defensive mechanism, not an attack; filters clients by MAC address

- (b) DHCP snooping — a defensive feature on switches; blocks untrusted DHCP messages

- (c) DHCP spoofing — a different attack where attacker sets up a rogue DHCP server to distribute malicious network settings (e.g., fake gateway)

Key distinction: Starvation exhausts the pool; Spoofing impersonates the server.

AI-generated — may contain errors

The original exam layout is preserved in the image so diagrams, formulas, tables, and code remain accurate.

This question comes from an official ITPEC past paper. ITPEC Practice is an independent study tool and is not affiliated with ITPEC. See the official FE past-paper collection or Report an issue.