GCIH · Question #67
You discover that your network routers are being flooded with broadcast packets that have the return address of one of the servers on your network. This is resulting in an overwhelming amount of…
The correct answer is C. Smurf attack. A Smurf attack amplifies a DoS flood by spoofing the victim's IP as the source of broadcast ICMP requests, causing all hosts on the network to reply to the victim simultaneously.
Question
You discover that your network routers are being flooded with broadcast packets that have the return address of one of the servers on your network. This is resulting in an overwhelming amount of traffic going back to that server and flooding it. What is this called?
Options
- ASyn flood
- BBlue jacking
- CSmurf attack
- DIP spoofing
How the community answered
(27 responses)- A4% (1)
- B7% (2)
- C74% (20)
- D15% (4)
Why each option
A Smurf attack amplifies a DoS flood by spoofing the victim's IP as the source of broadcast ICMP requests, causing all hosts on the network to reply to the victim simultaneously.
A SYN flood exploits the TCP three-way handshake by sending many SYN packets without completing the connection, exhausting server connection state tables rather than using broadcast amplification.
Bluejacking is a Bluetooth-based attack used to send unsolicited messages to Bluetooth-enabled devices and has no relation to IP broadcast flooding.
A Smurf attack uses IP spoofing to send ICMP echo requests to a network broadcast address with the victim's IP as the return address; every host on that segment responds to the victim, generating a traffic amplification flood that overwhelms the target server.
IP spoofing is a technique used within a Smurf attack, but it is not itself the name of this specific broadcast amplification attack pattern.
Concept tested: Smurf ICMP broadcast amplification DoS attack
Source: https://www.cloudflare.com/learning/ddos/smurf-ddos-attack/
Topics
Community Discussion
No community discussion yet for this question.