Which attack impersonates a legitimate DHCP server and offers IP addresses to clients acting as a default gateway?

• A. DHCP attack
• B. Session Hijacking
• C. Data Interception
• D. Rogue DHCP Server Attack

Answer: (D)

Impersonating a legitimate DHCP server to control how clients are configured on the network. In this attack, the attacker runs an unauthorized DHCP server that answers DHCP requests and hands out IP settings, including a default gateway that is under the attacker’s control. By directing clients to use a malicious gateway, traffic can be intercepted, redirected, or manipulated, enabling man-in-the-middle activities or traffic capture.

That’s why this is described as a rogue DHCP server attack: it relies on an unauthorized DHCP service providing configuration to clients and specifically setting a gateway that routes through the attacker. The other options don’t fit because session hijacking targets an active session after authentication, data interception is a broader term for eavesdropping, and a generic DHCP attack is too vague to capture the impersonation and gateway manipulation involved. Mitigations include DHCP snooping, disabling unauthorized DHCP servers, and network segmentation to prevent rogue servers from operating.