300-445 Question 201
Select 4An enterprise network is experiencing intermittent connectivity issues and degraded performance across multiple sites. After analyzing the traffic, you identify abnormal routing behavior and suspect a security issue. Which of the following could be the most likely causes of this issue?
- A
BGP hijacking, where malicious actors advertise incorrect routes to reroute traffic
- B
DNS hijacking, where DNS queries are redirected to malicious servers
- C
DDoS attacks targeting critical network infrastructure and saturating bandwidth
- D
Route leaking, where internal routes are accidentally or maliciously shared with external networks
- E
Misconfigured VLANs causing broadcast storms within the network
Show answer and explanation
Correct answers: A, B, C, D
Explanation
Enterprise network performance can be affected by various security issues. BGP hijacking, DNS hijacking, DDoS attacks, and route leaking are all security-related problems that can degrade network performance by disrupting normal routing, overwhelming resources, or redirecting traffic. Misconfigured VLANs, while a potential network issue, are not security issues and do not align with the context of the question.
- A. Correct.
BGP hijacking can lead to traffic being rerouted through unintended paths, which introduces latency, packet loss, and potential data interception, directly impacting network performance.
- B. Correct.
DNS hijacking redirects DNS queries to malicious servers, which can result in users being directed to incorrect or malicious destinations, affecting both performance and security.
- C. Correct.
DDoS attacks can overwhelm network infrastructure with excessive traffic, causing degraded performance and connectivity issues.
- D. Correct.
Route leaking exposes internal routes to external networks, leading to inefficient routing and potential security risks, which can degrade network performance.
- E. Incorrect.
While misconfigured VLANs can cause broadcast storms and local network issues, this is not a security issue tied to attacks like DDoS, DNS hijacking, or BGP hijacking.