QuestionQ310
Logs and Network ForensicsAfter an investigation into a denial-of-service (DoS) incident targeting a data center in Dallas, Texas, network analysts note an overwhelming number of half-open TCP sessions. The attacker continuously sends packets with particular TCP flag combinations, exhausting server resources before connections are completed. Packet captures also show occasional packets with both the SYN and FIN flags set at the same time.
Which attack pattern best describes the observed behavior?
- A TCP ACK flood attack
- B TCP SYN-FIN flood attack
- C TCP SYN flood attack
- D TCP RST flood attack
Community Discussion