nerdexam
(ISC)2

CSSLP · Question #225

Samantha works as an Ethical Hacker for we-are-secure Inc. She wants to test the security of the we- are-secure server for DoS attacks. She sends large number of ICMP ECHO packets to the target…

The correct answer is C. Ping flood attack. An ethical hacker sending a large number of ICMP ECHO packets to a target server to test for DoS attacks is performing a Ping flood attack. This technique overwhelms the target with ICMP requests, consuming its resources and making it unresponsive.

Secure Software Testing

Question

Samantha works as an Ethical Hacker for we-are-secure Inc. She wants to test the security of the we- are-secure server for DoS attacks. She sends large number of ICMP ECHO packets to the target computer. Which of the following DoS attacking techniques will she use to accomplish the task?

Options

  • ASmurf dos attack
  • BLand attack
  • CPing flood attack
  • DTeardrop attack

How the community answered

(31 responses)
  • A
    6% (2)
  • B
    3% (1)
  • C
    87% (27)
  • D
    3% (1)

Why each option

An ethical hacker sending a large number of ICMP ECHO packets to a target server to test for DoS attacks is performing a Ping flood attack. This technique overwhelms the target with ICMP requests, consuming its resources and making it unresponsive.

ASmurf dos attack

A Smurf DoS attack is a distributed denial-of-service attack where a large number of ICMP ECHO requests are sent to a network's broadcast address using a spoofed source IP address, causing all hosts on the network to reply to the spoofed target.

BLand attack

A Land attack involves sending a TCP SYN packet to a target with both the source and destination IP addresses and ports set to the same value, causing the target to enter an infinite loop trying to communicate with itself.

CPing flood attackCorrect

A Ping flood attack involves an attacker overwhelming a target system with an excessive number of ICMP ECHO request packets, commonly known as pings, causing the target to consume its resources in processing these requests and replying to them, leading to a denial of service. By sending a large volume of ICMP ECHO packets, Samantha aims to saturate the server's network bandwidth and processing capabilities. This saturation prevents legitimate traffic from reaching the server or causes the server to crash due to resource exhaustion.

DTeardrop attack

A Teardrop attack exploits vulnerabilities in the reassembly of fragmented IP packets, sending malformed fragmented packets that cause the target system to crash or freeze when attempting to reassemble them.

Concept tested: DoS attack techniques - Ping flood

Topics

#DoS Attacks#Ping Flood#Network Security#Vulnerability Testing

Community Discussion

No community discussion yet for this question.

Full CSSLP Practice