All sheets · Use your browser Print dialog (Ctrl P) and Save as PDF.
Z+
Attack / defense contrasts
Match the mechanism, then the control. TTP and PUP are excluded from this app’s default quiz path.
| Topic | Remember |
|---|---|
| Rogue DHCP | Wrong landlord. Trusted DHCP paths, snooping, remove unauthorized servers. |
| DHCP starvation | No leases left. Rate limiting, port security, watch the pool. |
| ARP poisoning | Address book lies. DAI plus trusted DHCP bindings. |
| MAC spoofing | Name badge copied. Port security helps but addresses can be spoofed — not 802.1X. |
| MAC flooding | Stuff the switch directory. Limit learned identities; flooding is not automatically inter-VLAN. |
| VLAN hopping | Crossing rooms. Restrict trunks, native/allowed VLANs, disable unwanted negotiation. |
| On-path | Who stands between the speakers. Positioning plus spoofing; authenticated encryption reduces interception harm. |
| Reflection vs amplification | Bounce toward the victim vs make it bigger. Not synonyms. |
| Phishing / social engineering | Pressure + secret request = pause and verify through a trusted channel. |
| Honeypot | Bait with an alarm. Does not replace patching production. |