ECSA v10: EC-Council Certified Security Analyst v10

Question

Moses, a professional hacker, attempts to overwhelm a target victim computer by sending TCP connection requests faster than the computer can handle them. He begins transmitting multiple SYN packets, each between 800 and 900 bytes, with spoofed source addresses and port numbers. Moses’s primary intent is to exhaust server resources and saturate the target organization’s network.

Identify the type of attack Moses is performing?

Explanation

A TCP SYN flood sends many connection requests—often using spoofed source addresses—without completing the TCP handshake. The target retains state for those incomplete connections, exhausting server resources and potentially overwhelming network capacity; this is a denial-of-service (DoS) attack.

Learn more

ECSA v10: EC-Council Certified Security Analyst v10

AstroTutor

Notes

Readiness

QuestionQ56

Community Discussion