In which TCP attack is the cybercriminal attempting to overwhelm a target host with half-open TCP connections?
- port scan attack
- SYN flood attack
- session hijacking attack
- reset attack
Explanation: In a TCP SYN flood attack, the attacker sends to the target host a continuous flood of TCP SYN session requests with a spoofed source IP address. The target host responds with a TCP-SYN-ACK to each of the SYN session requests and waits for a TCP ACK that will never arrive. Eventually the target is overwhelmed with half-open TCP connections.
Related exam: Modules 3 – 5: Network Security Exam Answers
Related exam: CCNA Cyber Ops (v1.1) – Chapter 7 Exam Answers
Related exam: Modules 13 - 14: Emerging Network Technologies Exam
Related exam: CyberOps Associate (Version 1.0) - Module 16: Attacking the Foundation Quiz Answers
Related exam: 3.4.2 Attacking the Foundation Quiz
Related exam: Cybersecurity Essentials My Knowledge Check Answers
