nerdexam
GIAC

GSLC · Question #277

Which of the following is a computer worm that caused a denial of service on some Internet hosts and dramatically slowed down general Internet traffic?

The correct answer is D. SQL Slammer. SQL Slammer was a fast-spreading worm that exploited a buffer overflow in Microsoft SQL Server, generating massive UDP traffic that caused widespread denial of service and severely degraded global Internet performance in January 2003.

Security Operations & Incident Response Leadership

Question

Which of the following is a computer worm that caused a denial of service on some Internet hosts and dramatically slowed down general Internet traffic?

Options

  • ACode red
  • BBeast
  • CKlez
  • DSQL Slammer

How the community answered

(39 responses)
  • A
    5% (2)
  • C
    3% (1)
  • D
    92% (36)

Why each option

SQL Slammer was a fast-spreading worm that exploited a buffer overflow in Microsoft SQL Server, generating massive UDP traffic that caused widespread denial of service and severely degraded global Internet performance in January 2003.

ACode red

Code Red was a worm targeting IIS web servers via a buffer overflow in the ISAPI extension, known for defacing websites and launching DDoS attacks against specific IP addresses, not for broadly slowing global Internet traffic.

BBeast

Beast is a remote access trojan (RAT) designed to give attackers backdoor control over infected systems, not a worm responsible for Internet-wide denial of service.

CKlez

Klez was an email-propagating worm and virus that spread via infected attachments and exploited Outlook vulnerabilities, but it did not cause significant denial of service or global Internet slowdown.

DSQL SlammerCorrect

SQL Slammer (also called Sapphire) exploited a buffer overflow vulnerability in Microsoft SQL Server 2000 via UDP port 1434. It spread so rapidly that it doubled in size every 8.5 seconds, generating enough traffic to cause packet loss and denial of service on numerous Internet hosts while dramatically slowing overall Internet traffic.

Concept tested: SQL Slammer worm denial of service impact

Source: https://learn.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-061

Topics

#SQL Slammer#DoS attack#worm#malware history

Community Discussion

No community discussion yet for this question.

Full GSLC Practice