nerdexam
Cisco

210-250 · Question #163

What type of attack occurs when an attacker sends a flood of protocol request packets to various IP hosts and the attacker spoofs the source IP address of the packets, such that each packet has the…

The correct answer is A. reflection attack. A reflection attack redirects traffic toward a victim by spoofing the victim's IP as the source, causing many third-party hosts to send their replies to the victim.

Threats and Vulnerabilities

Question

What type of attack occurs when an attacker sends a flood of protocol request packets to various IP hosts and the attacker spoofs the source IP address of the packets, such that each packet has the IP address of the intended target rather than the IP address of the attacker as its source address?

Options

  • Areflection attack
  • Bamplification attack
  • CMITM attack
  • DTrojan virus ARP

How the community answered

(20 responses)
  • A
    95% (19)
  • C
    5% (1)

Why each option

A reflection attack redirects traffic toward a victim by spoofing the victim's IP as the source, causing many third-party hosts to send their replies to the victim.

Areflection attackCorrect

In a reflection attack, the attacker inserts the victim's IP address as the source in packets sent to many legitimate servers; those servers then send their protocol responses - reflected - back to the victim's address, flooding the target without requiring direct attacker-to-victim communication and obscuring the attacker's identity.

Bamplification attack

An amplification attack specifically requires the response to be significantly larger than the request to multiply traffic volume; this scenario describes the reflection mechanism without specifying any size amplification ratio.

CMITM attack

A Man-in-the-Middle attack positions the attacker between two communicating parties to intercept or manipulate traffic, not to flood a victim using spoofed third-party reflectors.

DTrojan virus ARP

A Trojan virus is malicious code disguised as a legitimate program and has no relationship to IP spoofing-based network flood techniques.

Concept tested: Reflection attack IP spoofing and traffic redirection mechanism

Source: https://www.cisa.gov/news-events/alerts/2014/01/17/udp-based-amplification-attacks

Topics

#reflection attack#IP spoofing#DDoS#protocol flooding

Community Discussion

No community discussion yet for this question.

Full 210-250 Practice