nerdexam
EC-Council

EC0-350 · Question #165

After a client sends a connection request (SYN) packet to the server, the server will respond (SYN- ACK) with a sequence number of its choosing, which then must be acknowledged (ACK) by the client…

The correct answer is B. Session Hijacking attacks. See the full explanation below for the reasoning.

Question

After a client sends a connection request (SYN) packet to the server, the server will respond (SYN- ACK) with a sequence number of its choosing, which then must be acknowledged (ACK) by the client. This sequence number is predictable; the attack connects to a service first with its own IP address, records the sequence number chosen, and then opens a second connection from a forged IP address. The attack doesn't see the SYN-ACK (or any other packet) from the server, but can guess the correct responses. If the source IP address is used for authentication, then the attacker can use the one-sided communication to break into the server. What attacks can you successfully launch against a server using the above technique?

Options

  • ADenial of Service attacks
  • BSession Hijacking attacks
  • CWeb page defacement attacks
  • DIP spoofing attacks

How the community answered

(40 responses)
  • A
    5% (2)
  • B
    80% (32)
  • C
    13% (5)
  • D
    3% (1)

Community Discussion

No community discussion yet for this question.

Full EC0-350 Practice