GCIH · Question #137
Which of the following types of attacks come under the category of hacker attacks? Each correct answer represents a complete solution. Choose all that apply.
The correct answer is B. IP address spoofing D. Password cracking. This question tests knowledge of attack taxonomy, distinguishing direct hacker attacks (IP spoofing, password cracking) from network-based denial-of-service attacks (Smurf, Teardrop).
Question
Which of the following types of attacks come under the category of hacker attacks? Each correct answer represents a complete solution. Choose all that apply.
Options
- ASmurf
- BIP address spoofing
- CTeardrop
- DPassword cracking
How the community answered
(26 responses)- A4% (1)
- B92% (24)
- C4% (1)
Why each option
This question tests knowledge of attack taxonomy, distinguishing direct hacker attacks (IP spoofing, password cracking) from network-based denial-of-service attacks (Smurf, Teardrop).
Smurf is a DDoS amplification attack that floods a victim with ICMP echo replies by broadcasting spoofed packets to a network - it is classified as a DoS/network flood attack, not a direct hacker attack in standard EC-Council taxonomy.
IP address spoofing is a core hacker attack technique where the attacker forges the source IP header in packets to impersonate another host, enabling identity masking, session hijacking, and bypassing IP-based access controls.
Teardrop is a DoS fragmentation attack that sends malformed, overlapping IP fragments designed to crash vulnerable TCP/IP stacks - it is categorized as a network-level DoS attack, not a hacker attack.
Password cracking is a direct hacker attack that targets authentication credentials using methods such as brute force, dictionary, or hybrid techniques to gain unauthorized system access.
Concept tested: Classification of hacker attacks vs denial-of-service attacks
Source: https://csrc.nist.gov/publications/detail/sp/800-61/rev-2/final
Topics
Community Discussion
No community discussion yet for this question.