nerdexam
GIAC

GCIH · Question #257

Which of the following is a computer worm that caused a denial of service on some Internet hosts and dramatically slowed down general Internet traffic?

The correct answer is C. SQL Slammer. SQL Slammer (also known as Sapphire) was a fast-spreading 2003 worm that exploited a buffer overflow in Microsoft SQL Server, generating massive UDP traffic that caused widespread Internet slowdowns and outages.

Malware Analysis & Advanced Persistent Threats

Question

Which of the following is a computer worm that caused a denial of service on some Internet hosts and dramatically slowed down general Internet traffic?

Options

  • AKlez
  • BCode red
  • CSQL Slammer
  • DBeast

How the community answered

(41 responses)
  • A
    5% (2)
  • B
    7% (3)
  • C
    85% (35)
  • D
    2% (1)

Why each option

SQL Slammer (also known as Sapphire) was a fast-spreading 2003 worm that exploited a buffer overflow in Microsoft SQL Server, generating massive UDP traffic that caused widespread Internet slowdowns and outages.

AKlez

Klez was a mass-mailing email worm known for spoofing sender addresses and disabling antivirus software, not for causing broad Internet slowdowns via network flooding.

BCode red

Code Red was a worm targeting IIS web servers that defaced websites and launched DDoS attacks against specific IP addresses, but did not cause the same scale of global Internet slowdown as SQL Slammer.

CSQL SlammerCorrect

SQL Slammer was a 376-byte worm that fit entirely in a single UDP packet, allowing it to spread at extraordinary speed by exploiting CVE-2002-0649 in Microsoft SQL Server 2000. Within 10 minutes of release it had infected most vulnerable hosts globally, doubling every 8.5 seconds, and consumed enough bandwidth to cause significant packet loss and denial of service across large portions of the Internet.

DBeast

Beast is a Windows-based Remote Access Trojan (RAT) used for remote control of victim machines, not a self-propagating worm designed to flood network infrastructure.

Concept tested: SQL Slammer worm and network-layer denial of service

Source: https://www.caida.org/research/security/sapphire/

Topics

#SQL Slammer#worm#DoS worm#internet disruption

Community Discussion

No community discussion yet for this question.

Full GCIH Practice