Examkin

Question

Difficulty: MediumCommon Network Attack Types and Vectors

Match each common network attack type on the left with its corresponding operational mechanism or technical signature on the right.

  • TCP SYN FloodTransmits high volumes of TCP connection requests without completing the three-way handshake, exhausting the target server's memory allocation queue for pending connections.
  • Smurf AttackSends spoofed ICMP echo request packets to a network broadcast address, causing all subnet hosts to overwhelm the victim's IP address with echo replies.
  • Password SprayingAttempts a single common or weak credential across many distinct user accounts in an organization to avoid triggering account lockout thresholds.
  • TLS Downgrade AttackIntercepts client-server negotiations and manipulates protocol handshake parameters to force traffic over weaker or obsolete encryption standards.

Answer

TCP SYN Flood matches exhaustion of the server connection backlog queue; Smurf Attack matches ICMP broadcast amplification with spoofed source addresses; Password Spraying matches testing a single common password across multiple accounts to prevent lockouts; TLS Downgrade Attack matches manipulating negotiations to force legacy encryption protocols.
TCP SYN Flood targets server connection backlogs via unacknowledged SYN packets. Smurf Attack uses ICMP reflection/amplification via broadcast requests with a spoofed source IP address. Password Spraying tests one password against numerous accounts to evade lockout detection. TLS Downgrade Attack manipulates protocol negotiation to force communication over deprecated or weak ciphers.

Step-by-Step Solution

1
Analyze TCP SYN Flood mechanism.
Identified that TCP SYN Floods leverage uncompleted TCP handshakes (SYN sent, ACK never returned) to exhaust host connection buffers.
Understanding transport layer protocol state mechanisms differentiates SYN floods from other DoS methods.
2
Analyze Smurf Attack mechanism.
Identified that Smurf attacks use ICMP echo requests sent to network broadcast addresses with spoofed target IP source headers.
Distinguishing reflection and amplification attacks relies on identifying broadcast targets and spoofed headers.
3
Analyze Password Spraying mechanism.
Identified that password spraying targets horizontal user space by testing one common password against many accounts.
This strategy contrasts with brute-force attacks that attempt many passwords against a single account.
4
Analyze TLS Downgrade Attack mechanism.
Identified that downgrade attacks interfere with secure handshake negotiations to force fallback to older, vulnerable protocols.
Downgrade vectors target encryption protocol negotiation rather than network bandwidth or password guessing.

Key Concept

Common Network Attack Types and Vectors
Rate this question

Topics

Common Network Attack Types and Vectors

More questions from this topic