Which of the following Denial-of-Service (DoS) attacks employ IP fragmentation mechanism? Each correct answer represents a complete solution. Choose two.

A SYN flood attack sends a high volume of TCP SYN packets without completing the three-way handshake, exhausting the server's connection state table - it operates entirely at the TCP layer and does not use IP fragmentation.

The Teardrop attack crafts a series of IP fragments whose offset fields overlap in an illegal manner, so when the receiving host attempts to reassemble the fragments it encounters contradictory data ranges that can cause a buffer overflow or kernel crash. This attack directly exploits the reassembly algorithm defined in RFC 791 and affects vulnerable implementations of the IP stack. It is classified as a fragmentation-based DoS because its entire mechanism depends on manipulating fragment offset values.

A Land attack sends a TCP SYN packet in which the source IP address and port are spoofed to match the destination, causing the target to send replies to itself in an infinite loop - it does not rely on IP fragmentation.

The Ping of Death attack uses IP fragmentation to send an ICMP echo request packet that, when all fragments are reassembled, exceeds the legal maximum IPv4 packet size of 65,535 bytes. Vulnerable systems experience a buffer overflow during reassembly because their buffers were sized to the legal maximum and cannot accommodate the oversized result. The fragmentation mechanism is central to the attack because a single oversized packet would be rejected before transmission.