nerdexam
GIAC

GSLC · Question #113

You work as a Network Administrator for Marioxnet Inc. You have the responsibility of handling two routers with BGP protocol for the enterprise's network. One of the two routers gets flooded with an…

The correct answer is C. Denial-of-Service. A Denial-of-Service attack deliberately overwhelms one network device with excessive traffic while starving others, matching the flooding-and-starvation pattern observed on the two BGP routers.

Security Operations & Incident Response Leadership

Question

You work as a Network Administrator for Marioxnet Inc. You have the responsibility of handling two routers with BGP protocol for the enterprise's network. One of the two routers gets flooded with an unexpected number of data packets, while the other router starves with no packets reaching it. Which of the following attacks can be a potential cause of this?

Options

  • ASpoofing
  • BPacket manipulation
  • CDenial-of-Service
  • DEavesdropping

How the community answered

(20 responses)
  • A
    5% (1)
  • B
    5% (1)
  • C
    80% (16)
  • D
    10% (2)

Why each option

A Denial-of-Service attack deliberately overwhelms one network device with excessive traffic while starving others, matching the flooding-and-starvation pattern observed on the two BGP routers.

ASpoofing

Spoofing involves forging source IP addresses to impersonate another host, and while it can support other attacks, it does not by itself cause one router to be flooded while another is starved of traffic.

BPacket manipulation

Packet manipulation refers to altering the content or headers of in-transit packets, which affects data integrity but does not produce a traffic flooding or starvation effect on routers.

CDenial-of-ServiceCorrect

A DoS attack floods a target with more traffic than it can handle, exhausting its resources and making it unavailable to process legitimate packets. In a BGP environment, directing attack traffic at one router saturates it while the second router receives no legitimate traffic, producing the exact flooding-and-starvation asymmetry described. This also disrupts normal BGP peering and route advertisement between the two devices.

DEavesdropping

Eavesdropping is a passive interception attack that monitors network traffic without modifying it, causing no disruption to packet flow or router resource consumption.

Concept tested: DoS attack impact on BGP network infrastructure

Source: https://www.cisco.com/c/en/us/about/security-center/guide-ddos-defense.html

Topics

#DoS attack#BGP flooding#network availability#attack identification

Community Discussion

No community discussion yet for this question.

Full GSLC Practice