SSCP · Question #794
Which type of attack consists of modifying the length and fragmentation offset fields in sequential IP packets?
The correct answer is A. Teardrop attack. A Teardrop attack works by sending a series of IP packets with deliberately manipulated fragmentation offset fields, causing overlapping or impossible reassembly on the target system - this crashes or freezes the OS because it cannot reconstruct the malformed fragments. Why the…
Question
Options
- ATeardrop attack
- BSmurf attack
- CSYN attack
- DBuffer overflow attack
How the community answered
(43 responses)- A86% (37)
- B7% (3)
- C5% (2)
- D2% (1)
Explanation
A Teardrop attack works by sending a series of IP packets with deliberately manipulated fragmentation offset fields, causing overlapping or impossible reassembly on the target system - this crashes or freezes the OS because it cannot reconstruct the malformed fragments.
Why the distractors are wrong:
- B (Smurf): A Smurf attack amplifies ICMP echo requests by spoofing the victim's IP and broadcasting to a network, flooding the victim with replies - no fragmentation manipulation involved.
- C (SYN): A SYN flood exploits the TCP three-way handshake by sending masses of SYN packets without completing the connection, exhausting server resources.
- D (Buffer overflow): This attack sends more data than a buffer can hold to overwrite adjacent memory, enabling arbitrary code execution - entirely different layer and mechanism.
Memory tip: Think "tear"drop - the attack literally tears apart the fragmentation fields so the receiving system can't piece packets back together, like a torn puzzle with mismatched pieces.
Topics
Community Discussion
No community discussion yet for this question.