Which attack floods a network by sending ICMP echo requests to a broadcast address?

Which attack floods a network by sending ICMP echo requests to a broadcast address?

• A. Fraggle
• B. Smurf
• C. SYN flood
• D. Teardrop

Answer: (B)

This question tests understanding of how a broadcast-based amplification flood works using ICMP. In a Smurf attack, the attacker sends ICMP Echo Request packets to the broadcast address of a network, with the source IP spoofed to the victim. Every host on that network that receives the request replies to the spoofed address, causing a flood of ICMP Echo Replies directed at the victim. The result is a large amount of traffic aimed at the victim, overwhelming their network connection. This attack relies on directed broadcasts being enabled on the network, which modern networks often disable to prevent exactly this kind of abuse. Defenses include turning off directed broadcasts and applying proper ingress filtering to block spoofed source IPs. Fraggle is a UDP-based flood using echo/chargen services to a broadcast address, not ICMP. SYN flood targets TCP handshakes, and Teardrop exploits fragment handling, not ICMP broadcast amplification.

This question tests understanding of how a broadcast-based amplification flood works using ICMP. In a Smurf attack, the attacker sends ICMP Echo Request packets to the broadcast address of a network, with the source IP spoofed to the victim. Every host on that network that receives the request replies to the spoofed address, causing a flood of ICMP Echo Replies directed at the victim. The result is a large amount of traffic aimed at the victim, overwhelming their network connection.

This attack relies on directed broadcasts being enabled on the network, which modern networks often disable to prevent exactly this kind of abuse. Defenses include turning off directed broadcasts and applying proper ingress filtering to block spoofed source IPs.

Fraggle is a UDP-based flood using echo/chargen services to a broadcast address, not ICMP. SYN flood targets TCP handshakes, and Teardrop exploits fragment handling, not ICMP broadcast amplification.