Exam 200-201 topic 1 question 395 discussion

The correct answer is: C. Denial-of-service attack Why C ? ICMP traffic with malformed or obsolete headers: The traffic shows repeated Unknown ICMP (obsolete or malformed?) messages, which can indicate an attempt to send malformed ICMP packets. Malformed ICMP packets are often used in denial-of-service (DoS) attacks to overwhelm a target or exploit vulnerabilities in the protocol handling. Repeated Echo (ping) replies: The exhibit also shows consistent Echo (ping) replies, which could be part of a flooding attack, overwhelming the target system with ICMP traffic. Patterns indicative of DoS: Repeated malformed ICMP packets combined with high volumes of similar traffic are classic signs of a DoS attack, aiming to disrupt normal network functionality.

It could be either A or C. I will go with C.

Answer should be C considering that its the same Source and Destination IP's along with the ICMP protocol being continuously used.

I think this is data exfiltration