Torrid Networks interview question

TCP flags used by Attacker