GSLC · Question #113
You work as a Network Administrator for Marioxnet Inc. You have the responsibility of handling two routers with BGP protocol for the enterprise's network. One of the two routers gets flooded with an…
The correct answer is C. Denial-of-Service. A Denial-of-Service attack deliberately overwhelms one network device with excessive traffic while starving others, matching the flooding-and-starvation pattern observed on the two BGP routers.
Question
You work as a Network Administrator for Marioxnet Inc. You have the responsibility of handling two routers with BGP protocol for the enterprise's network. One of the two routers gets flooded with an unexpected number of data packets, while the other router starves with no packets reaching it. Which of the following attacks can be a potential cause of this?
Options
- ASpoofing
- BPacket manipulation
- CDenial-of-Service
- DEavesdropping
How the community answered
(20 responses)- A5% (1)
- B5% (1)
- C80% (16)
- D10% (2)
Why each option
A Denial-of-Service attack deliberately overwhelms one network device with excessive traffic while starving others, matching the flooding-and-starvation pattern observed on the two BGP routers.
Spoofing involves forging source IP addresses to impersonate another host, and while it can support other attacks, it does not by itself cause one router to be flooded while another is starved of traffic.
Packet manipulation refers to altering the content or headers of in-transit packets, which affects data integrity but does not produce a traffic flooding or starvation effect on routers.
A DoS attack floods a target with more traffic than it can handle, exhausting its resources and making it unavailable to process legitimate packets. In a BGP environment, directing attack traffic at one router saturates it while the second router receives no legitimate traffic, producing the exact flooding-and-starvation asymmetry described. This also disrupts normal BGP peering and route advertisement between the two devices.
Eavesdropping is a passive interception attack that monitors network traffic without modifying it, causing no disruption to packet flow or router resource consumption.
Concept tested: DoS attack impact on BGP network infrastructure
Source: https://www.cisco.com/c/en/us/about/security-center/guide-ddos-defense.html
Topics
Community Discussion
No community discussion yet for this question.