nerdexam
GIAC

GSLC · Question #146

John, a malicious hacker, forces a router to stop forwarding packets by flooding it with many open connections simultaneously so that all hosts behind it are effectively disabled. Which of the…

The correct answer is D. DoS attack. Flooding a router with many simultaneous open connections to exhaust its resources and disable downstream hosts is a Denial of Service (DoS) attack.

Security Operations & Incident Response Leadership

Question

John, a malicious hacker, forces a router to stop forwarding packets by flooding it with many open connections simultaneously so that all hosts behind it are effectively disabled. Which of the following attacks is John performing?

Options

  • AARP spoofing
  • BReplay attack
  • CRainbow attack
  • DDoS attack

How the community answered

(42 responses)
  • A
    2% (1)
  • B
    2% (1)
  • C
    5% (2)
  • D
    90% (38)

Why each option

Flooding a router with many simultaneous open connections to exhaust its resources and disable downstream hosts is a Denial of Service (DoS) attack.

AARP spoofing

ARP spoofing involves sending forged ARP replies to associate the attacker's MAC address with a legitimate IP, enabling traffic interception - it does not flood connections to exhaust router resources.

BReplay attack

A replay attack involves capturing valid authentication or data packets and retransmitting them later to gain unauthorized access, not flooding a device with connections.

CRainbow attack

A rainbow attack uses precomputed hash tables to crack password hashes offline and has nothing to do with network flooding or router resource exhaustion.

DDoS attackCorrect

A DoS attack works by overwhelming a target system - in this case a router - with excessive requests or open connections until it can no longer process legitimate traffic. Flooding with open connections exhausts the router's connection-state table or processing capacity, effectively taking it offline. This matches the classic definition of DoS: denying service to legitimate users by resource exhaustion.

Concept tested: Denial of Service attack via connection flooding

Source: https://www.cisa.gov/news-events/news/understanding-denial-service-attacks

Topics

#DoS attack#router flooding#network attack types#availability attack

Community Discussion

No community discussion yet for this question.

Full GSLC Practice