nerdexam
GIAC

GCIA · Question #7

John, a malicious hacker, forces a router to stop forwarding packets by flooding it with many open connections simultaneously so that all hosts behind it are effectively disabled. Which of the followi

The correct answer is B. DoS attack. Flooding a router with many simultaneous open connections to exhaust its resources and disable downstream hosts is a classic Denial of Service (DoS) attack.

Advanced Incident Response & Digital Forensics Fundamentals

Question

John, a malicious hacker, forces a router to stop forwarding packets by flooding it with many open connections simultaneously so that all hosts behind it are effectively disabled. Which of the following attacks is John performing?

Options

  • ARainbow attack
  • BDoS attack
  • CARP spoofing
  • DReplay attack

How the community answered

(20 responses)
  • A
    10% (2)
  • B
    70% (14)
  • C
    15% (3)
  • D
    5% (1)

Why each option

Flooding a router with many simultaneous open connections to exhaust its resources and disable downstream hosts is a classic Denial of Service (DoS) attack.

ARainbow attack

A rainbow attack is a password-cracking technique that uses precomputed hash tables to reverse cryptographic hashes and has no relation to flooding network devices.

BDoS attackCorrect

A Denial of Service (DoS) attack aims to make a network resource unavailable by overwhelming it with traffic or connection requests beyond its capacity to handle. Flooding a router with open connections exhausts its state table and processing resources, preventing it from forwarding legitimate packets and effectively disabling all hosts behind it.

CARP spoofing

ARP spoofing involves sending falsified ARP messages to link the attacker's MAC address with a legitimate IP address, used for traffic interception rather than resource exhaustion.

DReplay attack

A replay attack captures and retransmits valid network packets to trick a system into accepting them as legitimate, which is an authentication bypass technique, not a resource exhaustion method.

Concept tested: Denial of Service attack via connection flooding

Source: https://www.cisa.gov/news-events/news/understanding-denial-service-attacks

Topics

#DoS attack#router flooding#connection exhaustion#network attack

Community Discussion

No community discussion yet for this question.

Full GCIA Practice