QUESTION 28 Which of the following is NOT true about the smurf attack? smurf att

Question

QUESTION 28 Which of the following is NOT true about the smurf attack? smurf attack is a ping flood attack it exploits the broadcasting feature it works by setting destination address of the larget machine and the source address as the broadcast address the victim machine can on a remote machine QUESTION 29 Which of the following is NOT true about SYN flooding attack? it works by sending a large amount of the SYN packets without sending SYN/ACK packet it works because the server site has to keep as many half-open sessions in the memory as possible since SYN cookie mechanism has not been implemented in windows, then windows cannot prevent SYN Flooding

Explanation / Answer

Answer:-

28).option d( the victim machine can on a remote machine.)

explanation: A smurf attack is denial of service attack(Dos).Here the system is flooded with spoofed ping messages.It is an exploitation of IP broadcast addressing to create a denial of service.Most devices on a network will respond to this by sending a reply to the source IP address. If the number of machines on the network that receive and respond to these packets is very large, the victim's computer will be flooded with traffic.However it cannot be used to on a remote machine.

29)option b(it works because the server site has to keep as many half-open sessions in the memory as possible)

explanation:-SYN flooding attacks is a type of denial of service attack in which the attacker sends SYN requests to the target's system  to consume server resources to make the system unresponsive to the traffic.A SYN flood attack works by not responding to the server with the expected ACK code.there are number of ways which can be used as counter measure for this kind of attack.some of them are:SYN cache,SYN cookies,increasing backlogs,filtering etc.the use of SYN cookies allows a server to avoid dropping connections when the SYN queue fills up. Instead, the server behaves as if the SYN queue had been enlarged.

Hope you like my answer..:)

Related Questions

Navigate

• Browse (All)
• Browse Q
• Subjects

---

---

Integrity-first tutoring: explanations and feedback only — we do not complete graded work. Learn more.