Denial-of-Service and DDoS CEH Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A company's web application is under attack. The attack sends HTTP requests with a very slow data transfer rate, keeping connections open for a long time. The goal is to exhaust the server's connection pool. Which type of attack is this, and what is the best mitigation?

   • ASlowloris; increase the server's connection timeout.
   • BTCP SYN flood; enable SYN cookies.
   • CSlowloris; configure the server to limit the number of connections per IP and reduce timeout values.
   • DHTTP POST flood; deploy a load balancer.
   Reveal Solution Discussion Select an answer first
2. 2expert · hard

   A financial services company is experiencing a DDoS attack that is overwhelming their internet link. The attack is a mix of UDP floods and SYN floods. They have a DDoS protection service that can scrub traffic, but the service is activated only after the attack is detected. The company's security team wants to minimize downtime. What is the most effective strategy?

   • ARely on the DDoS protection service's automatic detection and activation, which typically takes a few minutes.
   • BImplement on-premises mitigation only, using firewalls and IPS to filter the attack traffic.
   • CUse a combination of on-premises rate limiting and the DDoS protection service, but keep the service on-demand.
   • DPre-provision the DDoS protection service to always route traffic through the scrubbing center, even during normal operations.
   Reveal Solution Discussion Select an answer first
4. 3expert · hard

   A company's application is experiencing a DDoS attack that is characterized by a large number of requests for a specific, expensive API endpoint that performs complex database queries. The requests come from many different IPs and have valid session cookies. The company wants to mitigate the attack without blocking legitimate users. Which approach is most effective?

   • AIncrease the database capacity to handle the load.
   • BUse a behavioral analysis tool to identify and block anomalous request patterns.
   • CImplement rate limiting per IP for the API endpoint.
   • DBlock all requests to the expensive API endpoint.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A company is preparing for a potential DDoS attack and wants to implement a mitigation strategy that can handle both volumetric and application-layer attacks without requiring significant changes to their existing infrastructure. Which approach should they choose?

   • AIncrease server capacity and bandwidth to handle the expected attack size.
   • BImplement strict firewall rules that block all UDP traffic.
   • CSubscribe to a cloud-based DDoS protection service that uses anycast and traffic scrubbing.
   • DDeploy an on-premises load balancer with SSL termination.
   Reveal Solution Discussion Select an answer first
6. 5application · easy

   A security analyst is explaining the difference between DoS and DDoS attacks to a junior team member. Which statement correctly describes the key difference?

   • AA DoS attack uses multiple sources, while a DDoS attack uses a single source.
   • BA DoS attack originates from a single source, while a DDoS attack originates from multiple distributed sources.
   • CA DoS attack is always more severe than a DDoS attack.
   • DA DoS attack targets the application layer, while a DDoS attack targets the network layer.
   Reveal Solution Discussion Select an answer first