Exam 200-201 topic 1 question 400 discussion

The exhibit shows a series of TCP SYN packets being sent from a range of public IP addresses to a single destination, `192.168.0.1`, on port 80 (HTTP). Each connection attempt starts with a SYN flag, and no subsequent flags (such as SYN-ACK or ACK) are visible. This pattern indicates a **Denial-of-Service (DoS) attack**, specifically a **SYN flood**. In a SYN flood attack, the attacker sends a large number of SYN requests to a target but does not complete the three-way TCP handshake. This causes the target's resources to become overwhelmed by the half-open connections, potentially leading to service disruption. ### Correct Answer: **D. denial-of-service attack**