GCFA · Question #16
Which of the following attacks saturates network resources and disrupts services to a specific computer?
The correct answer is C. Denial-of-Service (DoS) attack. A Denial-of-Service (DoS) attack is specifically defined as an attack that saturates network or system resources to prevent legitimate users from accessing services. It directly matches the description of disrupting services to a specific computer.
Question
Which of the following attacks saturates network resources and disrupts services to a specific computer?
Options
- ATeardrop attack
- BPolymorphic shell code attack
- CDenial-of-Service (DoS) attack
- DReplay attack
How the community answered
(33 responses)- A9% (3)
- B18% (6)
- C70% (23)
- D3% (1)
Why each option
A Denial-of-Service (DoS) attack is specifically defined as an attack that saturates network or system resources to prevent legitimate users from accessing services. It directly matches the description of disrupting services to a specific computer.
A Teardrop attack exploits a vulnerability in TCP/IP fragmentation reassembly by sending overlapping, malformed IP fragments that cause the target system to crash - it does not primarily saturate bandwidth or network resources.
A polymorphic shellcode attack is a code obfuscation technique used by malware to mutate its signature and evade intrusion detection systems, which is unrelated to resource exhaustion or service disruption.
A Denial-of-Service attack works by overwhelming a target system, server, or network with a flood of illegitimate requests or traffic, exhausting available resources such as bandwidth, CPU, or memory. This resource saturation prevents the target from responding to legitimate requests, effectively disrupting or denying service. It is the canonical definition of a DoS attack and the direct match to the question's description of 'saturating network resources and disrupting services.'
A replay attack involves capturing a valid authentication token or data transmission and retransmitting it to impersonate a legitimate user, targeting authentication integrity rather than resource availability.
Concept tested: Definition and mechanism of Denial-of-Service attacks
Source: https://www.cisa.gov/news-events/news/understanding-denial-service-attacks
Topics
Community Discussion
No community discussion yet for this question.