GCIH · Question #173
You discover that all available network bandwidth is being used by some unknown service. You discover that UDP packets are being used to connect the echo service on one machine to the chargen…
The correct answer is B. Denial of Service. The UDP echo-chargen loop creates a self-sustaining packet flood between two services, consuming all available bandwidth in a classic Denial of Service attack.
Question
You discover that all available network bandwidth is being used by some unknown service. You discover that UDP packets are being used to connect the echo service on one machine to the chargen service on another machine. What kind of attack is this?
Options
- ASmurf
- BDenial of Service
- CEvil Twin
- DVirus
How the community answered
(60 responses)- A12% (7)
- B78% (47)
- C8% (5)
- D2% (1)
Why each option
The UDP echo-chargen loop creates a self-sustaining packet flood between two services, consuming all available bandwidth in a classic Denial of Service attack.
A Smurf attack uses ICMP echo requests broadcast to a network with a spoofed victim source IP, not a UDP loop between echo and chargen services.
A DoS attack exhausts system or network resources to deny service to legitimate users. The echo service (port 7) reflects any received packet back to the sender, while the chargen service (port 19) continuously generates character streams; when a spoofed UDP packet connects them, they create an endless packet amplification loop consuming all available bandwidth. This specific technique is sometimes called an echo-chargen bomb or UDP loopback attack.
An Evil Twin attack involves a rogue wireless access point mimicking a legitimate one to intercept Wi-Fi traffic, which has no relation to UDP service exploitation.
A virus is self-replicating malware that attaches itself to files; it does not describe a network-level bandwidth exhaustion technique using UDP services.
Concept tested: UDP echo-chargen Denial of Service attack
Source: https://www.cisa.gov/news-events/alerts/1996/07/23/denial-service-and-ip-spoofing
Topics
Community Discussion
No community discussion yet for this question.