200-201: Understanding Cisco Cybersecurity Operations Fundamentals

By Cisco · Question Mode

QuestionQ7

Network Intrusion Analysis

After a substantial influx of network traffic to externally facing devices, a security engineer investigates what appears to be a denial-of-service attack. On reviewing the packet-capture data, the engineer observes that the traffic consists of one SYN packet to each port. Which type of attack is taking place?

Explanation

A port scan commonly sends a SYN packet to each target port to discover which services are reachable. One SYN per port indicates reconnaissance of port states, rather than the high-volume repeated SYN traffic used to exhaust resources in a SYN flood.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!