Consider the simple network shown below for a small company, with few resources to dedicate to network security.

Web proxy for outgoing traffic;

Active Directory Domain

Controller, and DHCP Server

An intruder has access to the network through an implant, compromised physical device on the network, or a compromised client, but doesn't yet have further access.

There is only one subnet within the company, and it can be assumed a tap at any point on the subnet will receive the same traffic.

Briefly survey the kind of network and application traffic that is occurring on the network that an intruder may find useful for the purpose of further compromise into the network or the systems thereof, at least covering $5$ types of traffic.

Give an example of one potential passive attack on this network, involving at least one protocol.

Give an example of one potential active attack on this network, involving at least one protocol.

And briefly critique th security in this network.