312-49 · Question #293
James is testing the ability of his routers to withstand DoS attacks. James sends ICMP ECHO requests to the broadcast address of his network. What type of DoS attack is James testing against his…
The correct answer is B. Smurf. A Smurf attack is an ICMP-based amplification Denial of Service attack. The attacker sends ICMP Echo Request (ping) packets to a network's broadcast address with the source IP spoofed to be the victim's IP address. Every host on the network that receives the broadcast responds…
Question
James is testing the ability of his routers to withstand DoS attacks. James sends ICMP ECHO requests to the broadcast address of his network. What type of DoS attack is James testing against his network?
Options
- AFraggle
- BSmurf
- CSYN flood
- DTrinoo
How the community answered
(39 responses)- A3% (1)
- B90% (35)
- C5% (2)
- D3% (1)
Explanation
A Smurf attack is an ICMP-based amplification Denial of Service attack. The attacker sends ICMP Echo Request (ping) packets to a network's broadcast address with the source IP spoofed to be the victim's IP address. Every host on the network that receives the broadcast responds with an ICMP Echo Reply directed at the spoofed source IP (the victim), flooding the victim with traffic proportional to the number of hosts on the network - achieving significant amplification. James is testing exactly this: sending ICMP ECHO requests to the broadcast address. A Fraggle attack (A) is nearly identical but uses UDP packets instead of ICMP. A SYN flood (C) exploits the TCP three-way handshake by sending many SYN packets without completing connections. Trinoo (D) is a distributed DoS framework using UDP flood agents, unrelated to ICMP broadcast amplification.
Topics
Community Discussion
No community discussion yet for this question.