nerdexam
GIAC

GCFA · Question #16

Which of the following attacks saturates network resources and disrupts services to a specific computer?

The correct answer is C. Denial-of-Service (DoS) attack. A Denial-of-Service (DoS) attack is specifically defined as an attack that saturates network or system resources to prevent legitimate users from accessing services. It directly matches the description of disrupting services to a specific computer.

Advanced Incident Response & Digital Forensics Fundamentals

Question

Which of the following attacks saturates network resources and disrupts services to a specific computer?

Options

  • ATeardrop attack
  • BPolymorphic shell code attack
  • CDenial-of-Service (DoS) attack
  • DReplay attack

How the community answered

(33 responses)
  • A
    9% (3)
  • B
    18% (6)
  • C
    70% (23)
  • D
    3% (1)

Why each option

A Denial-of-Service (DoS) attack is specifically defined as an attack that saturates network or system resources to prevent legitimate users from accessing services. It directly matches the description of disrupting services to a specific computer.

ATeardrop attack

A Teardrop attack exploits a vulnerability in TCP/IP fragmentation reassembly by sending overlapping, malformed IP fragments that cause the target system to crash - it does not primarily saturate bandwidth or network resources.

BPolymorphic shell code attack

A polymorphic shellcode attack is a code obfuscation technique used by malware to mutate its signature and evade intrusion detection systems, which is unrelated to resource exhaustion or service disruption.

CDenial-of-Service (DoS) attackCorrect

A Denial-of-Service attack works by overwhelming a target system, server, or network with a flood of illegitimate requests or traffic, exhausting available resources such as bandwidth, CPU, or memory. This resource saturation prevents the target from responding to legitimate requests, effectively disrupting or denying service. It is the canonical definition of a DoS attack and the direct match to the question's description of 'saturating network resources and disrupting services.'

DReplay attack

A replay attack involves capturing a valid authentication token or data transmission and retransmitting it to impersonate a legitimate user, targeting authentication integrity rather than resource availability.

Concept tested: Definition and mechanism of Denial-of-Service attacks

Source: https://www.cisa.gov/news-events/news/understanding-denial-service-attacks

Topics

#Denial-of-Service#network attack#resource exhaustion#DoS vs DDoS

Community Discussion

No community discussion yet for this question.

Full GCFA Practice