A client is asking a penetration tester to evaluate a new web application for availability. Which of the following types of attacks should the tester use?

The correct answer is A. TCP SYN flood. A TCP SYN flood (also known as an SYN flood) is a form of denial-of-service (DDoS) attack in which a tester sends a succession of SYN requests to the target’s system in an attempt to consume enough server resources to make the system unresponsive to genuine traffic. This…

Attacks and exploits

Question

Options

ATCP SYN flood
BSQL injection
Cxss
DXMAS scan

How the community answered

(53 responses)

A
91% (48)
B
6% (3)
C
2% (1)
D
2% (1)

Explanation

A TCP SYN flood (also known as an SYN flood) is a form of denial-of-service (DDoS) attack in which a tester sends a succession of SYN requests to the target’s system in an attempt to consume enough server resources to make the system unresponsive to genuine traffic. This exploits part of the normal TCP three-way handshake and consumes resources on the targeted server and renders it unresponsive.

Topics

#TCP SYN flood#DoS#availability testing#web application

Community Discussion

No community discussion yet for this question.

Full PT0-001 Practice