nerdexam
EC-Council

312-50V10 · Question #541

Which of the following network attacks relies on sending an abnormally large packet size that exceeds TCP/ IP specifications?

The correct answer is A. Ping of death. The ping of death attack sends malformed ICMP packets exceeding the maximum IP packet size of 65,535 bytes, causing target systems to crash or become unresponsive upon reassembly.

Denial of Service

Question

Which of the following network attacks relies on sending an abnormally large packet size that exceeds TCP/ IP specifications?

Options

  • APing of death
  • BSYN flooding
  • CTCP hijacking
  • DSmurf attack

How the community answered

(50 responses)
  • A
    90% (45)
  • B
    6% (3)
  • C
    2% (1)
  • D
    2% (1)

Why each option

The ping of death attack sends malformed ICMP packets exceeding the maximum IP packet size of 65,535 bytes, causing target systems to crash or become unresponsive upon reassembly.

APing of deathCorrect

The ping of death exploits the TCP/IP specification by crafting an ICMP echo request that, when fragmented for transmission and then reassembled at the destination, exceeds the 65,535-byte maximum IP packet size. This buffer overflow condition causes the target operating system to crash, freeze, or reboot, constituting a denial-of-service condition. The attack directly matches the description of using abnormally large packets that violate TCP/IP size specifications.

BSYN flooding

SYN flooding is a denial-of-service attack that sends large numbers of TCP SYN packets without completing the three-way handshake, exhausting server connection state tables rather than using oversized packets.

CTCP hijacking

TCP hijacking (session hijacking) involves an attacker intercepting and taking over an established TCP session by predicting or sniffing sequence numbers, not by transmitting oversized packets.

DSmurf attack

A smurf attack is an amplification attack that spoofs a victim's IP address and sends ICMP broadcast requests to many hosts, generating a flood of responses directed at the victim, unrelated to packet size violations.

Concept tested: Ping of death oversized packet denial-of-service attack

Source: https://www.cisa.gov/uscert/ncas/tips/ST04-015

Topics

#ping of death#DoS attack types#oversized packets#TCP/IP vulnerabilities

Community Discussion

No community discussion yet for this question.

Full 312-50V10 Practice