Which of the following Denial-of-Service (DoS) attacks employ IP fragmentation mechanism? Each correct answer represents a complete solution. Choose two.

The correct answer is C. Teardrop attack D. Ping of Death attack. The correct answers are C and D, as both exploit IP fragmentation. Teardrop attack sends malformed overlapping IP fragments with incorrect offset values. When the target OS attempts to reassemble the fragments, the overlapping/invalid offsets cause a crash or freeze. Ping of…

Vulnerability Exploitation & Privilege Escalation

Question

Options

ALand attack
BSYN flood attack
CTeardrop attack
DPing of Death attack

How the community answered

(42 responses)

A
5% (2)
B
2% (1)
C
93% (39)

Explanation

The correct answers are C and D, as both exploit IP fragmentation. Teardrop attack sends malformed overlapping IP fragments with incorrect offset values. When the target OS attempts to reassemble the fragments, the overlapping/invalid offsets cause a crash or freeze. Ping of Death crafts an ICMP Echo Request that, when fully reassembled, exceeds the maximum legal IP packet size of 65,535 bytes. The OS crashes or reboots when it tries to reassemble the oversized fragments. The other two do not use fragmentation: Land attack sends a packet with identical source and destination IP/port to create an infinite loop, and SYN flood exploits the TCP three-way handshake by sending a flood of SYN packets without completing the connection, exhausting server resources.

Topics

#IP fragmentation#Teardrop attack#Ping of Death#DoS

Community Discussion

No community discussion yet for this question.

Full GCIH Practice