nerdexam
GIAC

GCIH · Question #452

What will a host do when it receives a packet with an invalid TCP checksum?

The correct answer is A. Drop the packet. When a host receives a TCP packet with an invalid checksum, it silently discards the packet because the data is considered corrupt and untrustworthy.

Reconnaissance, Scanning, and Enumeration

Question

What will a host do when it receives a packet with an invalid TCP checksum?

Options

  • ADrop the packet
  • BHold the packet and wait for a rebroadcast
  • CSend an ICMP redirect
  • DReply with a TCP reset

How the community answered

(19 responses)
  • A
    95% (18)
  • D
    5% (1)

Why each option

When a host receives a TCP packet with an invalid checksum, it silently discards the packet because the data is considered corrupt and untrustworthy.

ADrop the packetCorrect

TCP uses a checksum field in its header to verify data integrity. If the checksum computed by the receiver does not match the value in the header, the packet is corrupted and must be dropped immediately. The sender's retransmission timer will eventually trigger a resend of the segment without any explicit notification from the receiver.

BHold the packet and wait for a rebroadcast

TCP has no 'hold and wait for rebroadcast' mechanism - corrupted packets are discarded and retransmission is handled by the sender's own timer, not by a receiver request.

CSend an ICMP redirect

ICMP redirect messages are used by routers to inform hosts of a better route to a destination, not to signal TCP-layer checksum errors.

DReply with a TCP reset

A TCP RST is sent to abruptly terminate an existing connection or reject an unexpected connection attempt, not as a response to a checksum failure.

Concept tested: TCP checksum error handling and packet discard

Source: https://www.rfc-editor.org/rfc/rfc793

Topics

#TCP checksum#packet validation#invalid packet handling#TCP/IP stack

Community Discussion

No community discussion yet for this question.

Full GCIH Practice