210-250 · Question #163
What type of attack occurs when an attacker sends a flood of protocol request packets to various IP hosts and the attacker spoofs the source IP address of the packets, such that each packet has the…
The correct answer is A. reflection attack. A reflection attack redirects traffic toward a victim by spoofing the victim's IP as the source, causing many third-party hosts to send their replies to the victim.
Question
What type of attack occurs when an attacker sends a flood of protocol request packets to various IP hosts and the attacker spoofs the source IP address of the packets, such that each packet has the IP address of the intended target rather than the IP address of the attacker as its source address?
Options
- Areflection attack
- Bamplification attack
- CMITM attack
- DTrojan virus ARP
How the community answered
(20 responses)- A95% (19)
- C5% (1)
Why each option
A reflection attack redirects traffic toward a victim by spoofing the victim's IP as the source, causing many third-party hosts to send their replies to the victim.
In a reflection attack, the attacker inserts the victim's IP address as the source in packets sent to many legitimate servers; those servers then send their protocol responses - reflected - back to the victim's address, flooding the target without requiring direct attacker-to-victim communication and obscuring the attacker's identity.
An amplification attack specifically requires the response to be significantly larger than the request to multiply traffic volume; this scenario describes the reflection mechanism without specifying any size amplification ratio.
A Man-in-the-Middle attack positions the attacker between two communicating parties to intercept or manipulate traffic, not to flood a victim using spoofed third-party reflectors.
A Trojan virus is malicious code disguised as a legitimate program and has no relationship to IP spoofing-based network flood techniques.
Concept tested: Reflection attack IP spoofing and traffic redirection mechanism
Source: https://www.cisa.gov/news-events/alerts/2014/01/17/udp-based-amplification-attacks
Topics
Community Discussion
No community discussion yet for this question.