CompTIA PenTest+ (PT1-002) — Question 41
A penetration tester who is conducting a vulnerability assessment discovers that ICMP is disabled on a network segment. Which of the following could be used for a denial-of-service attack on the network segment?
Answer options
- A. Smurf
- B. Ping flood
- C. Fraggle
- D. Ping of death
Correct answer: C
Explanation
The correct answer is C, Fraggle, which uses UDP packets to achieve a denial-of-service attack, making it effective even when ICMP is disabled. Options A (Smurf) and D (Ping of death) rely on ICMP, while B (Ping flood) also uses ICMP for its execution, hence they would not be viable in this scenario.