Which one of the following attacks will pass through a network layer intrusion detection system
undetected?

A.
A teardrop attack

B.
A SYN flood attack

C.
A DNS spoofing attack

D.
A test.cgi attack

Explanation:
“Because a network-based IDS reviews packets and headers, it can also detect denial of service (DoS)
attacks.” Pg. 64 Krutz: The CISSP Prep Guide Not A or B: “The following sections discuss some of the
possible DoS attacks available. Smurf Fraggle SYN Flood Teardrop DNS DoS Attacks” Pg. 732-737
Shon Harris: All-In-One CISSP Certification Exam Guide