ISC Exam Questions

Which type of attack leverages overlapping fragments to cause a denial of service?

Which type of attack leverages overlapping fragments to cause a denial of service?

A.
Smurf

B.
Teardrop

C.
Fraggle

D.
Session hijacking

Explanation:
Answer B is correct; the teardrop attack is a DoS that works by sending overlapping fragments that, when received by a vulnerable host, can cause a system to crash.

Incorrect Answers and Explanations: A, C, and D: Answers A, C, and D are incorrect. Smurf attacks are a DoS that use spoofed ICMP Echo Requests sent to misconfigured third parties (amplifiers) to attempt to exhaust the resources of the victim. Fraggle attacks are a variation on the smurf attack that use spoofed UDP rather than ICMP messages to stimulate the misconfigured third party systems. Session hijacking involves a combination of sniffing and spoofing in order for the attacker to masquerade as one or both ends of an established connection.