A client cannot connect to the corporate web server. You discover a large number of half-open TCP connections to the server. What should you do?

The correct answer is A. Take action to stop the TCP SYN flood attack. A TCP SYN flood attack overwhelms a target server by initiating a high volume of TCP connections but never completing the handshake, resulting in numerous half-open connections that consume system resources and can render the service unavailable.

Network Security Concepts

Question

Options

ATake action to stop the TCP SYN flood attack.
BChange the connection protocol from HTTP to HTTPS.
CIgnore the half-open connections because this is a normal part of the TCP three-way handshake.
DFlush the DNS cache information.

How the community answered

(25 responses)

A
84% (21)
B
4% (1)
C
4% (1)
D
8% (2)

Explanation

A TCP SYN flood attack overwhelms a target server by initiating a high volume of TCP connections but never completing the handshake, resulting in numerous half-open connections that consume system resources and can render the service unavailable.

Topics

#SYN flood#DoS attack#TCP three-way handshake#half-open connections

Community Discussion

No community discussion yet for this question.

Full 100-160 Practice