Exam 200-201 topic 1 question 344 discussion

Actual exam question from Cisco's 200-201

Question #: 344
Topic #: 1

After a large influx of network traffic to externally facing devices, a security engineer begins investigating what appears to be a denial of service attack. When the packet capture data is reviewed, the engineer notices that the traffic is a single SYN packet to each port. Which type of attack is occurring?

A. traffic fragmentation
B. port scanning
C. host profiling
D. SYN flood

Show Suggested Answer

Suggested Answer: B 🗳️

by ImGonnaPassIt at Dec. 20, 2024, 3:50 p.m.

Comments

Submit Cancel

Frontal

2 months, 1 week ago

Selected Answer: B

ChatGPT with us on this one! B

upvoted 1 times

...

mgo28404

5 months, 1 week ago

Selected Answer: B

The correct answer is: B. port scanning Explanation: A port scanning attack is characterized by sending packets (often a single SYN packet) to multiple ports on a target machine to determine which ports are open, closed, or filtered. This behavior aligns with the scenario described, where a single SYN packet is sent to each port. Why not D. SYN flood A SYN flood attack involves sending numerous SYN packets to a specific port to overwhelm the target, which is different from the described behavior of targeting multiple ports with single packets.

upvoted 2 times

...

ImGonnaPassIt

6 months ago

Selected Answer: B

A single SYN packet sent to each port, is indicative of port scanning. Answer B.

upvoted 2 times

...