Cisco
600-199 · Question #48
Which three symptoms are best used to detect a TCP SYN flood attack? (Choose three.)
The correct answer is B. large number of sockets in SYN_RECV state on target server C. network monitoring devices report large number of unACKed SYNs sent to target server E. user experience with target server is slow or unresponsive. See the full explanation below for the reasoning.
Question
Which three symptoms are best used to detect a TCP SYN flood attack? (Choose three.)
Options
- Ahigh memory utilization on target server
- Blarge number of sockets in SYN_RECV state on target server
- Cnetwork monitoring devices report large number of unACKed SYNs sent to target server
- Dtarget server crashes repeatedly
- Euser experience with target server is slow or unresponsive
How the community answered
(37 responses)- A19% (7)
- B70% (26)
- D11% (4)
Community Discussion
No community discussion yet for this question.