Which type of network attack involves randomly opening many Telnet requests to a router and results in a valid network administrator not being able to access the device?
- DNS poisoning
- man-in-the-middle
- SYN flooding
- spoofing
Explanation: The TCP SYN Flood attack exploits the TCP three-way handshake. The threat actor continually sends TCP SYN session request packets with a randomly spoofed source IP address to an intended target. The target device replies with a TCP SYN-ACK packet to the spoofed IP address and waits for a TCP ACK packet. Those responses never arrive. Eventually the target host is overwhelmed with half-open TCP connections and denies TCP services.
Related exam: Checkpoint Exam: Threats and Attacks Group Exam
Related exam: Endpoint Security - Network Security Checkpoint Exam
Related exam: Cybersecurity Essentials - Checkpoint Exam: Network Security (Module 1 – 6 Exam)
Related exam: Endpoint Security: My Knowledge Check Answers
