In which of the following attacks is a malicious packet rejected by an IDS, but accepted by the host system?
Suggested Answer: B
Get Premium GPEN Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
26 comments · newest first
JO
Joaquin
5 months ago
I feel B) Evasion fits best. IDS can't catch it sometimes.
KA
Kathryn
5 months ago
What about C) Fragmentation overwrite? Could be a candidate too.
GA
Gaynell
6 months ago
I agree, B) Evasion is tricky. IDS misses it.
RI
Rikki
6 months ago
I think it's B) Evasion. It makes sense.
LA
Lashaunda
6 months ago
Yeah, B makes sense, but it’s kinda surprising how often it happens.
FR
Francoise
6 months ago
Wait, are you sure? I thought Fragmentation overlap was the answer!
GE
Gene
6 months ago
Definitely B) Evasion, that one trips up a lot of people.
IN
Inocencia
6 months ago
I thought it was A) Insertion.
JA
Jani
7 months ago
It's B) Evasion, right?
TI
Timothy
7 months ago
Haha, "Fragmentation overwrite" - sounds like a dance move!
MI
Micaela
7 months ago
Insertion? Really? That's too obvious.
LO
Louvenia
8 months ago
D) Fragmentation overlap seems like the most likely option to me.
BR
Brock
8 months ago
Fragmentation overwrite sounds like a cool attack, but I'm not sure if it's the right answer here.
DA
Dalene
8 months ago
I think the answer is B) Evasion.
DE
Derick
8 months ago
I definitely remember that evasion attacks can trick IDS, so I'm leaning towards option B, but I need to double-check my notes.
KE
Kenneth
8 months ago
I feel like the answer could be fragmentation overwrite, but I also have a nagging feeling it might be something else.
RH
Rhea
8 months ago
I remember practicing a question about fragmentation overlap, but I can't recall if that one fits this scenario.
IZ
Izetta
9 months ago
I think this might be related to the evasion techniques we discussed, but I'm not entirely sure if it's the right answer.
AM
Amalia
9 months ago
Hmm, this is a tricky one. I'm going to have to really think through the differences between these attack types and how the IDS and host system might respond differently. I'll make sure I understand the concepts before answering.
MA
Markus
9 months ago
I've seen questions like this before. I think the key is understanding how the IDS and host system process fragmented packets. B) Evasion sounds right, but I'll review my notes to be sure.
KA
Kallie
9 months ago
Okay, let's see. I'm pretty sure it's not A) Insertion or C) Fragmentation overwrite, since those don't seem to match the description. I'm leaning towards D) Fragmentation overlap, but I'll double-check my understanding.
TI
Tien
9 months ago
I'm a bit confused on this one. Is it something to do with how the IDS and host system handle fragmented packets differently? I'll have to think it through carefully.
SH
Shasta
10 months ago
Hmm, this one's tricky. I think it might be B) Evasion, where the IDS misses the malicious packet but the host system accepts it.
PR
Precious
3 months ago
What about A) Insertion? Could that be a possibility too?
IL
Ilona
4 months ago
I was thinking the same! Evasion makes sense.
CA
Carline
5 months ago
I agree, B) Evasion sounds right. The IDS can overlook it.