nerdexam
GIAC

GCIH · Question #102

You work as a Network Administrator for Marioxnet Inc. You have the responsibility of handling two routers with BGP protocol for the enterprise's network. One of the two routers gets flooded with an…

The correct answer is B. Denial-of-Service. The symptoms described - one router flooded with packets while another is starved of traffic - are consistent with a Denial-of-Service attack that overwhelms one BGP peer while diverting or blocking traffic to the other.

Incident Response & Cyber Kill Chain

Question

You work as a Network Administrator for Marioxnet Inc. You have the responsibility of handling two routers with BGP protocol for the enterprise's network. One of the two routers gets flooded with an unexpected number of data packets, while the other router starves with no packets reaching it. Which of the following attacks can be a potential cause of this?

Options

  • APacket manipulation
  • BDenial-of-Service
  • CSpoofing
  • DEavesdropping

How the community answered

(23 responses)
  • B
    96% (22)
  • C
    4% (1)

Why each option

The symptoms described - one router flooded with packets while another is starved of traffic - are consistent with a Denial-of-Service attack that overwhelms one BGP peer while diverting or blocking traffic to the other.

APacket manipulation

Packet manipulation alters the content or headers of packets in transit but does not by itself cause asymmetric flooding on one router and starvation on another.

BDenial-of-ServiceCorrect

A Denial-of-Service attack can generate a massive volume of traffic directed at one router, exhausting its CPU and memory resources, while simultaneously exploiting BGP route advertisements to divert legitimate traffic away from the second router, producing the flooding and starvation pattern described in the scenario.

CSpoofing

Spoofing involves forging source IP addresses to impersonate trusted hosts, which does not directly explain why one router receives excessive traffic while the other receives none.

DEavesdropping

Eavesdropping is a passive monitoring attack that observes traffic without modifying or redirecting it, so it cannot cause the flooding or starvation described.

Concept tested: Denial-of-Service attack impact on BGP routing

Source: https://www.rfc-editor.org/rfc/rfc4272

Topics

#DoS#BGP#packet flooding#network attack

Community Discussion

No community discussion yet for this question.

Full GCIH Practice