What is the greatest danger from DHCP?

A.
An intruder on the network impersonating a DHCP server and thereby misconfiguring the DHCP clients.

B.
Having multiple clients on the same LAN having the same IP address.

C.
Having the wrong router used as the default gateway.

D.
Having the organization’s mail server unreachable.

Explanation:
The main security risk concerning DHCP is that unauthorized (rogue) DHCP servers offering IP configuration to
DHCP clients. Rogue DHCP servers are often used in man in the middle or denial of service attacks for
malicious purposes.
Incorrect Answers:
B: IP address collisions are not a major security risk.
C: Incorrect default gateway is not a major security problem compared to a rogue DHCP Server.
D: An unreachable mail server is not a main security concern compared to the damage a rogue DHCP server
can do.

Harris, Shon, All In One CISSP Exam Guide, 6th Edition, McGraw-Hill, New York, 2013, p. 598