Which class of DoS attacks exploits vulnerabilities in application layer protocols or applications, often by opening and holding many connections?

Which class of DoS attacks exploits vulnerabilities in application layer protocols or applications, often by opening and holding many connections?

• A. UDP flood attack
• B. Application Layer Attacks
• C. ICMP flood attacks
• D. Ping of Death

Answer: (B)

Attacks that target the application layer focus on the resources and behavior of the software handling a service, such as how a protocol or web application manages connections, sessions, and requests. The best choice describes attacks that abuse application protocols or apps by opening and holding many connections to exhaust server resources like threads, memory, or connection tables. This kind of DoS is effective even if network bandwidth remains available, because the service is overwhelmed by the number of active application-state entries rather than by raw traffic volume. In contrast, UDP flood and ICMP flood attacks aim to saturate network bandwidth or overwhelm network devices by sending large volumes of protocol-agnostic packets, not by exploiting the target’s application logic. The Ping of Death is a historic technique that sends oversized ICMP packets to crash or disrupt a host, which is a network-layer issue rather than an intentional exhaustion of an application’s connection state.

Attacks that target the application layer focus on the resources and behavior of the software handling a service, such as how a protocol or web application manages connections, sessions, and requests. The best choice describes attacks that abuse application protocols or apps by opening and holding many connections to exhaust server resources like threads, memory, or connection tables. This kind of DoS is effective even if network bandwidth remains available, because the service is overwhelmed by the number of active application-state entries rather than by raw traffic volume.

In contrast, UDP flood and ICMP flood attacks aim to saturate network bandwidth or overwhelm network devices by sending large volumes of protocol-agnostic packets, not by exploiting the target’s application logic. The Ping of Death is a historic technique that sends oversized ICMP packets to crash or disrupt a host, which is a network-layer issue rather than an intentional exhaustion of an application’s connection state.