Which type of attack causes a remote host to crash because it cannot respond to any new TCP connection requests?
A.
Crack attack
B.
Smurf attack
C.
SYN flood
D.
ICMP flood
Explanation:
SYN floods use inherent characteristics in the TCP/IP protocol to flood a system with network packets. A SYN flood is starts a TCP session by issuing a SUN request which is not completed and left unfinished. This is repeated continuously. Eventually, the system will not be able to respond to network packets from anyone and the target system becomes unusable.
1D0-470
Incorrect Answers:
A: The aim of a crack attack is to steal passwords, not to cause the remote host to crash.
B: Smurf attacks, attacks involving forged ICMP echo request packets sent to IP broadcast addresses, can result in large amounts of ICMP echo reply packets being sent from an intermediary site to a victim, which can cause network congestion or outages. The ICMP echo requests does not use a TCP connection.
D: An ICMP flood is usually accomplished by broadcasting either a bunch of ICMP pings or UDP packets. The idea is, to send so much data to your system, that it slows you down so much that you’re disconnected from IRC due to a ping timeout.
The ICMP ping does not use a TCP connection.