nerdexam
EC-Council

312-50V11 · Question #1020

Jude, a pen tester working in Keiltech Ltd., performs sophisticated security testing on his company's network infrastructure to identify security loopholes. In this process, he started to circumvent…

The correct answer is C. Spoofed session flood attack. This question tests knowledge of a specific TCP-based flood attack that bypasses firewalls by forging legitimate-looking session packets. The spoofed session flood attack uses crafted SYN, ACK, and RST/FIN packets to simulate valid TCP sessions while exhausting network resources.

Denial of Service

Question

Jude, a pen tester working in Keiltech Ltd., performs sophisticated security testing on his company's network infrastructure to identify security loopholes. In this process, he started to circumvent the network protection tools and firewalls used in the company. He employed a technique that can create forged TCP sessions by carrying out multiple SYN, ACK, and RST or FIN packets. Further, this process allowed Jude to execute DDoS attacks that can exhaust the network resources. What is the attack technique used by Jude for finding loopholes in the above scenario?

Options

  • AUDP flood attack
  • BPing-of-death attack
  • CSpoofed session flood attack
  • DPeer-to-peer attack

How the community answered

(27 responses)
  • A
    7% (2)
  • B
    4% (1)
  • C
    85% (23)
  • D
    4% (1)

Why each option

This question tests knowledge of a specific TCP-based flood attack that bypasses firewalls by forging legitimate-looking session packets. The spoofed session flood attack uses crafted SYN, ACK, and RST/FIN packets to simulate valid TCP sessions while exhausting network resources.

AUDP flood attack

A UDP flood attack sends massive volumes of UDP datagrams to overwhelm a target but does not involve forging TCP session packets such as SYN, ACK, or RST/FIN.

BPing-of-death attack

A ping-of-death attack sends malformed or oversized ICMP echo request packets to crash or freeze the target system, and does not involve forging TCP sessions.

CSpoofed session flood attackCorrect

A spoofed session flood attack forges complete or partial TCP sessions using SYN, ACK, and RST/FIN packets, making the traffic appear legitimate to stateful firewalls and network protection tools. Because the packets mimic real session handshakes, perimeter defenses that rely on session state tracking can be bypassed. This allows an attacker to exhaust network resources and execute a DDoS effect without being filtered by conventional protection mechanisms.

DPeer-to-peer attack

A peer-to-peer attack redirects P2P clients to flood a target by exploiting P2P file-sharing protocols, which is unrelated to forging TCP SYN/ACK/RST session packets.

Concept tested: Spoofed TCP session flood attack technique

Source: https://www.eccouncil.org/cybersecurity-exchange/ethical-hacking/ddos-attack-types/

Topics

#spoofed session flood#TCP session forgery#DDoS attack#firewall evasion

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 312-50V11 Practice