nerdexam
(ISC)2

CSSLP · Question #335

Which of the following is an attack with IP fragments that cannot be reassembled?

The correct answer is B. Teardrop attack. A Teardrop attack is a type of denial-of-service attack that exploits vulnerabilities in the IP reassembly process by sending fragmented packets that cannot be correctly reassembled by the target system, often leading to system crashes.

Secure Software Concepts

Question

Which of the following is an attack with IP fragments that cannot be reassembled?

Options

  • APassword guessing attack
  • BTeardrop attack
  • CDictionary attack
  • DSmurf attack

How the community answered

(31 responses)
  • A
    3% (1)
  • B
    94% (29)
  • C
    3% (1)

Why each option

A Teardrop attack is a type of denial-of-service attack that exploits vulnerabilities in the IP reassembly process by sending fragmented packets that cannot be correctly reassembled by the target system, often leading to system crashes.

APassword guessing attack

A password guessing attack is an attempt to determine a user's password by systematically trying different combinations.

BTeardrop attackCorrect

The Teardrop attack involves sending deliberately malformed IP fragments to a target, which causes errors during the reassembly process, often leading to system instability or crashes.

CDictionary attack

A dictionary attack is a specific type of password guessing attack that uses a predefined list of common words or phrases.

DSmurf attack

A Smurf attack is a type of denial-of-service attack that uses ICMP echo requests to overwhelm a target network.

Concept tested: Teardrop attack

Source: https://learn.microsoft.com/en-us/previous-versions/tn-archive/cc722756(v=technet.10)

Topics

#Teardrop attack#Denial of Service#IP fragmentation#Network attacks

Community Discussion

No community discussion yet for this question.

Full CSSLP Practice