In which of the following IDS evasion attacks does an attacker send a data packet such that IDS accepts the data packet but the host computer rejects it?

A fragmentation overlap attack exploits ambiguity when two IP fragments cover overlapping byte ranges, causing the IDS and host to reassemble conflicting content, but does not specifically describe the IDS accepting a packet the host rejects.

An evasion attack is the inverse scenario - the host accepts the packet but the IDS drops or ignores it, hiding the traffic from the IDS rather than inserting false data into it.

A fragmentation overwrite attack is a variant where a later fragment completely overwrites earlier fragment data during reassembly, but again does not specifically describe the IDS-accepts/host-rejects asymmetry.

In an insertion attack, the attacker crafts a packet that the IDS reassembles into its stream model but which the target host discards - for example due to an invalid TTL or checksum that the host enforces but the IDS does not. This causes the IDS to track a different byte stream than the host actually processes, allowing malicious payloads to be hidden within the gap between the two interpretations.