nerdexam
EC-Council

312-50V12 · Question #29

Jude, a pen tester working in Keiltech Ltd., performs sophisticated security testing on his company's network infrastructure to identify security loopholes. In this process, he started to circumvent t

The correct answer is A. Spoofed session flood attack. Jude used a spoofed session flood attack to bypass the network protection tools and firewalls used in his company's network infrastructure. This attack technique involves creating forged TCP sessions by sending multiple SYN, ACK, RST, or FIN packets to the target system. By doing

Submitted by tom_us· Mar 4, 2026Network and Perimeter Hacking

Question

Jude, a pen tester working in Keiltech Ltd., performs sophisticated security testing on his company's network infrastructure to identify security loopholes. In this process, he started to circumvent the network protection tools and firewalls used in the company. He employed a technique that can create forged TCP sessions by carrying out multiple SYN, ACK, and RST or FIN packets. Further, this process allowed Jude to execute DDoS attacks that can exhaust the network resources. What is the attack technique used by Jude for finding loopholes in the above scenario?

Options

  • ASpoofed session flood attack
  • BUDP flood attack
  • CPeer-to-peer attack
  • DPing-of-death attack

How the community answered

(29 responses)
  • A
    76% (22)
  • B
    7% (2)
  • C
    14% (4)
  • D
    3% (1)

Explanation

Jude used a spoofed session flood attack to bypass the network protection tools and firewalls used in his company's network infrastructure. This attack technique involves creating forged TCP sessions by sending multiple SYN, ACK, RST, or FIN packets to the target system. By doing so, the attacker can exhaust the target system's resources and make it unresponsive to legitimate In a spoofed session flood attack, the attacker sends packets with a forged source IP address, making it difficult for the target system to distinguish between legitimate and malicious traffic. This makes it easier for the attacker to bypass network protection tools and firewalls, which may be configured to block traffic from known malicious IP addresses.

Topics

#DDoS attack#TCP session spoofing#firewall evasion

Community Discussion

No community discussion yet for this question.

Full 312-50V12 Practice