nerdexam
EC-Council

312-50V11 · Question #541

Which of the following network attacks relies on sending an abnormally large packet size that exceeds TCP/ IP specifications?

The correct answer is A. Ping of death. The ping of death attack sends ICMP echo request packets that exceed the maximum legal IP packet size of 65,535 bytes, causing target systems to crash or freeze.

Denial of Service

Question

Which of the following network attacks relies on sending an abnormally large packet size that exceeds TCP/ IP specifications?

Options

  • APing of death
  • BSYN flooding
  • CTCP hijacking
  • DSmurf attack

How the community answered

(32 responses)
  • A
    94% (30)
  • B
    3% (1)
  • C
    3% (1)

Why each option

The ping of death attack sends ICMP echo request packets that exceed the maximum legal IP packet size of 65,535 bytes, causing target systems to crash or freeze.

APing of deathCorrect

The ping of death exploits the fact that IPv4 packets are limited to 65,535 bytes; by fragmenting an oversized ICMP packet and reassembling it on the target, the overflow can corrupt memory and crash vulnerable systems. This directly violates TCP/IP specifications for maximum transmission unit sizes. It is distinct from volumetric floods because it relies on a single malformed oversized packet rather than traffic volume.

BSYN flooding

SYN flooding exploits the TCP three-way handshake by sending many SYN packets without completing connections, exhausting the target's connection table rather than sending oversized packets.

CTCP hijacking

TCP hijacking involves intercepting and taking over an established TCP session, not sending malformed oversized packets.

DSmurf attack

A Smurf attack uses ICMP broadcast amplification by spoofing the victim's IP in echo requests sent to a broadcast address, not abnormally large packet sizes.

Concept tested: Ping of death oversized ICMP packet attack

Source: https://www.cloudflare.com/learning/ddos/ping-of-death-ddos-attack/

Topics

#ping of death#oversized packets#DoS attacks#TCP/IP

Community Discussion

No community discussion yet for this question.

Full 312-50V11 Practice