nerdexam
GIAC

GCIH · Question #137

Which of the following types of attacks come under the category of hacker attacks? Each correct answer represents a complete solution. Choose all that apply.

The correct answer is B. IP address spoofing D. Password cracking. This question tests knowledge of attack taxonomy, distinguishing direct hacker attacks (IP spoofing, password cracking) from network-based denial-of-service attacks (Smurf, Teardrop).

Vulnerability Exploitation & Privilege Escalation

Question

Which of the following types of attacks come under the category of hacker attacks? Each correct answer represents a complete solution. Choose all that apply.

Options

  • ASmurf
  • BIP address spoofing
  • CTeardrop
  • DPassword cracking

How the community answered

(26 responses)
  • A
    4% (1)
  • B
    92% (24)
  • C
    4% (1)

Why each option

This question tests knowledge of attack taxonomy, distinguishing direct hacker attacks (IP spoofing, password cracking) from network-based denial-of-service attacks (Smurf, Teardrop).

ASmurf

Smurf is a DDoS amplification attack that floods a victim with ICMP echo replies by broadcasting spoofed packets to a network - it is classified as a DoS/network flood attack, not a direct hacker attack in standard EC-Council taxonomy.

BIP address spoofingCorrect

IP address spoofing is a core hacker attack technique where the attacker forges the source IP header in packets to impersonate another host, enabling identity masking, session hijacking, and bypassing IP-based access controls.

CTeardrop

Teardrop is a DoS fragmentation attack that sends malformed, overlapping IP fragments designed to crash vulnerable TCP/IP stacks - it is categorized as a network-level DoS attack, not a hacker attack.

DPassword crackingCorrect

Password cracking is a direct hacker attack that targets authentication credentials using methods such as brute force, dictionary, or hybrid techniques to gain unauthorized system access.

Concept tested: Classification of hacker attacks vs denial-of-service attacks

Source: https://csrc.nist.gov/publications/detail/sp/800-61/rev-2/final

Topics

#IP spoofing#password cracking#hacker attack types#network attacks

Community Discussion

No community discussion yet for this question.

Full GCIH Practice