GIAC
GCIH · Question #596
GCIH Question #596: Real Exam Question with Answer & Explanation
Sign in or unlock GCIH to reveal the answer and full explanation for question #596. The question stem and answer options stay visible for context.
Question
You run a network using the 10.0.0.0/8 address range. You notice a strange increase in traffic coming from one of your DMZ servers one day. You collect a packet trace using Tcpdump, and notice a rapidly repeating pattern of traffic that resembles the following output. What kind of attack is your server most likely perpetrating?
Exhibit
Options
- AA Netbus attack
- BA Back Orifice scan
- CA Tribe Flood Network attack
- DA SYN Flood
Unlock GCIH to see the answer
You've previewed enough free GCIH questions. Unlock GCIH for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.