ECCouncil Exam Questions

which an attacker deliberately violates the three-way handshake and opens a large number of half-ope

SYN Flood is a DOS attack in which an attacker deliberately violates the three-way handshake and opens a large number of half-open TCP connections. The signature of attack for SYN Flood contains:

A.
The source and destination address having the same value

B.
A large number of SYN packets appearing on a network without the corresponding reply packets

C.
The source and destination port numbers having the same value

D.
A large number of SYN packets appearing on a network with the corresponding reply packets