210-250 · Question #166
A ping attack that exploits the broadcast IP address in a subnet is referred to as what type of attack?
The correct answer is C. smurf. A smurf attack amplifies ICMP echo requests by sending them to a subnet broadcast address with a spoofed source IP, causing all hosts to reply to the victim.
Question
A ping attack that exploits the broadcast IP address in a subnet is referred to as what type of attack?
Options
- Ared rat
- Bfraggle
- Csmurf
- DSYN flood
- Efirewalk
How the community answered
(52 responses)- A2% (1)
- B8% (4)
- C87% (45)
- D4% (2)
Why each option
A smurf attack amplifies ICMP echo requests by sending them to a subnet broadcast address with a spoofed source IP, causing all hosts to reply to the victim.
Red rat is not a recognized network attack type related to broadcast ICMP exploitation.
A fraggle attack is similar but uses UDP echo packets to the broadcast address rather than ICMP, making it a distinct variant.
The smurf attack exploits the ICMP echo request mechanism by sending packets to the broadcast address of a network with the victim's IP spoofed as the source address. Every reachable host on that subnet replies to the victim simultaneously, creating a massive amplification of traffic. This floods the victim's network connection, resulting in denial of service.
A SYN flood targets TCP connection state by sending large numbers of SYN packets without completing the handshake, not using broadcast ICMP.
Firewalk is a reconnaissance technique used to determine firewall ACL rules by manipulating TTL values, unrelated to broadcast ping amplification.
Concept tested: Smurf ICMP broadcast amplification attack
Source: https://www.cisco.com/c/en/us/about/security-center/smurf.html
Topics
Community Discussion
No community discussion yet for this question.