Computer Hacking Forensic Investigator (CHFI v10) — Question 35

What type of attack sends spoofed UDP packets (instead of ping packets) with a fake source address to the IP broadcast address of a large network?

Answer options

• A. Fraggle
• B. Smurf scan
• C. SYN flood
• D. Teardrop

Correct answer: A

Explanation

The Fraggle attack specifically uses spoofed UDP packets targeting the broadcast address to amplify traffic against a victim. In contrast, a Smurf scan typically involves ICMP packets, a SYN flood is a TCP-based attack, and a Teardrop attack exploits vulnerabilities in TCP packet reassembly. Therefore, only Fraggle matches the criteria outlined in the question.