The intrusion detection system at your site has detected Internet Protocol (IP) packets where the IP
source address is the same as the destination address. This situation indicates

A.
Misdirected traffic jammed to the internal network.

B.
A denial of service attack.

C.
An error in the internal address matrix.

D.
A hyper overflow in the IP stack.

Explanation:
“The Land denial of service attack causes many older operating systems (such as Windows NT 4,
Windows 95, and SunOS 4.1.4) to freeze and behave in an unpredictable manner. It works by
creating an artificial TCP packet that has the SYN flag set. The attacker set the destination IP address

to the address of the victim machine and the destination port to an open port on that machine.
Next, the attacker set the source IP address and source port to the same values as the destination IP
address and port. When the targeted host receives this unusual packet, the operating system
doesn’t know how to process it and freezes, crashes, or behaves in an unusual manner as a result.”
Pg 237 Tittel: CISSP Study Guide