312-50V10 · Question #541
Which of the following network attacks relies on sending an abnormally large packet size that exceeds TCP/ IP specifications?
The correct answer is A. Ping of death. The ping of death attack sends malformed ICMP packets exceeding the maximum IP packet size of 65,535 bytes, causing target systems to crash or become unresponsive upon reassembly.
Question
Which of the following network attacks relies on sending an abnormally large packet size that exceeds TCP/ IP specifications?
Options
- APing of death
- BSYN flooding
- CTCP hijacking
- DSmurf attack
How the community answered
(50 responses)- A90% (45)
- B6% (3)
- C2% (1)
- D2% (1)
Why each option
The ping of death attack sends malformed ICMP packets exceeding the maximum IP packet size of 65,535 bytes, causing target systems to crash or become unresponsive upon reassembly.
The ping of death exploits the TCP/IP specification by crafting an ICMP echo request that, when fragmented for transmission and then reassembled at the destination, exceeds the 65,535-byte maximum IP packet size. This buffer overflow condition causes the target operating system to crash, freeze, or reboot, constituting a denial-of-service condition. The attack directly matches the description of using abnormally large packets that violate TCP/IP size specifications.
SYN flooding is a denial-of-service attack that sends large numbers of TCP SYN packets without completing the three-way handshake, exhausting server connection state tables rather than using oversized packets.
TCP hijacking (session hijacking) involves an attacker intercepting and taking over an established TCP session by predicting or sniffing sequence numbers, not by transmitting oversized packets.
A smurf attack is an amplification attack that spoofs a victim's IP address and sends ICMP broadcast requests to many hosts, generating a flood of responses directed at the victim, unrelated to packet size violations.
Concept tested: Ping of death oversized packet denial-of-service attack
Source: https://www.cisa.gov/uscert/ncas/tips/ST04-015
Topics
Community Discussion
No community discussion yet for this question.