Question: The connection establishment procedure in TCP is susceptible to a serious security problem called the _________ attack.

Answer:

The connection establishment procedure in TCP (Transmission Control Protocol) is susceptible to a serious security problem called the "TCP SYN Flood" attack.
In a TCP SYN Flood attack, an attacker sends a large number of TCP SYN (Synchronize) segments to a victim host with a fake source IP address. When the victim host receives the SYN segments, it allocates memory resources to keep track of the connection requests and sends a SYN+ACK (Synchronize-Acknowledgment) segment back to the source IP address.
However, since the source IP address is fake, the SYN+ACK segments are sent to an invalid or non-existent host. As a result, the victim host waits for a response that will never arrive, and its memory resources are quickly depleted, causing it to become unresponsive to legitimate traffic.
The TCP SYN Flood attack is a type of Denial-of-Service (DoS) attack that can disrupt network services and cause significant damage to an organization. To mitigate this attack, various techniques such as rate limiting, TCP SYN cookies, and firewalls can be used.

MCQ: The connection establishment procedure in TCP is susceptible to a serious security problem called the _________ attack.

Correct Answer: A. ACK flooding

The connection establishment procedure in TCP (Transmission Control Protocol) is susceptible to a serious security problem called the "TCP SYN Flood" attack.
In a TCP SYN Flood attack, an attacker sends a large number of TCP SYN (Synchronize) segments to a victim host with a fake source IP address. When the victim host receives the SYN segments, it allocates memory resources to keep track of the connection requests and sends a SYN+ACK (Synchronize-Acknowledgment) segment back to the source IP address.
However, since the source IP address is fake, the SYN+ACK segments are sent to an invalid or non-existent host. As a result, the victim host waits for a response that will never arrive, and its memory resources are quickly depleted, causing it to become unresponsive to legitimate traffic.
The TCP SYN Flood attack is a type of Denial-of-Service (DoS) attack that can disrupt network services and cause significant damage to an organization. To mitigate this attack, various techniques such as rate limiting, TCP SYN cookies, and firewalls can be used.