GCIA: GIAC Certified Intrusion AnalystDemo

Question

Which IDS-evasion attack involves an attacker sending a data packet that the IDS accepts but the host computer rejects?

A Fragmentation overlap attack
B Evasion attack
C Fragmentation overwrite attack
D Insertion attack

Explanation

An insertion attack causes the IDS to accept and process data that the target host rejects, creating a discrepancy between what the IDS observes and what the host actually receives.

GCIA: GIAC Certified Intrusion AnalystDemo

AstroTutor

Notes

Readiness

QuestionQ121

Community Discussion