nerdexam
CompTIA

CV0-003 · Question #363

Which of the following is a denial of service attack that attempts to overwhelm a target with ICMP echo requests?

The correct answer is B. Ping flood. A ping flood is a volumetric DoS attack that sends a continuous high-rate stream of ICMP echo request packets to saturate the target's bandwidth or processing capacity.

Security

Question

Which of the following is a denial of service attack that attempts to overwhelm a target with ICMP echo requests?

Options

  • ASmurf attack
  • BPing flood
  • CPing of death
  • DSYN flood

How the community answered

(36 responses)
  • A
    3% (1)
  • B
    86% (31)
  • C
    8% (3)
  • D
    3% (1)

Why each option

A ping flood is a volumetric DoS attack that sends a continuous high-rate stream of ICMP echo request packets to saturate the target's bandwidth or processing capacity.

ASmurf attack

A Smurf attack also leverages ICMP but uses a spoofed source IP and broadcasts to an amplification network so that many third-party hosts reply to the victim - it is an amplification/reflection attack, not a direct ICMP flood.

BPing floodCorrect

A ping flood (ICMP flood) works by sending as many ICMP echo request packets as possible directly to a target host, consuming its inbound bandwidth and CPU cycles processing replies. The sheer volume of traffic prevents the target from servicing legitimate requests, achieving denial of service through resource exhaustion rather than exploitation of a vulnerability.

CPing of death

The Ping of Death sends a single deliberately malformed or oversized ICMP packet designed to crash or destabilize the target's IP stack, relying on a parsing vulnerability rather than traffic volume.

DSYN flood

A SYN flood exploits the TCP three-way handshake by sending large numbers of SYN packets without completing connections, exhausting server connection state tables - it uses TCP, not ICMP.

Concept tested: ICMP ping flood DoS attack mechanism

Source: https://www.cloudflare.com/learning/ddos/ping-flood-ddos-attack/

Topics

#DoS attacks#ICMP#ping flood#network security

Community Discussion

No community discussion yet for this question.

Full CV0-003 Practice