PrepAway - Latest Free Exam Questions & Answers

Which type of attack involves hijacking a session betwe…

Which type of attack involves hijacking a session between a host and a target by predicting the target’s choice
of an initial TCP sequence number?

PrepAway - Latest Free Exam Questions & Answers

A.
IP spoofing attack

B.
SYN flood attack

C.
TCP sequence number attack

D.
Smurf attack

Explanation:
A TCP sequence prediction attack is an attempt to predict the sequence number used to identify the packets in
a TCP connection, which can be used to counterfeit packets.
Incorrect Answers:
A: IP spoofing attacks do not use TCP sequence numbers. IP spoofing is a hijacking technique in which a
cracker masquerades as a trusted host to conceal his identity.
B: Syn flood attacks do not use TCP sequence numbers. A SYN flood DoS attack where an attacker sends a
succession of SYN packets with the goal of overwhelming the victim system so that it is unresponsive to
legitimate traffic.
D: A Smurf attack does not use TCP sequence numbers. In a smurf attack the attacker sends an ICMP ECHO
REQUEST packet with a spoofed source address to a victim’s network broadcast address.

https://en.wikipedia.org/wiki/TCP_sequence_prediction_attack


Leave a Reply