Denial-of-Service and DDoS CEH Practice Questions (Page 8)

Questions 36–40

1. 36foundation · easy

   What is the primary function of a DDoS protection service (e.g., Cloudflare or AWS Shield)?

   • ATo provide a backup server for the target
   • BTo encrypt all data transmitted to the target
   • CTo absorb and filter malicious traffic before it reaches the target
   • DTo block all incoming traffic to the target
   Reveal Solution Discussion Select an answer first
2. 37application · medium

   A company's web application suddenly becomes unresponsive. Network monitoring shows a massive flood of UDP packets from many different source IPs, all directed at a single open UDP port on the application server. The packets are large and consume most of the server's network bandwidth. Which type of attack is this, and what immediate mitigation is most appropriate?

   • AVolumetric UDP flood; configure the firewall to drop or rate-limit traffic to that UDP port.
   • BApplication-layer HTTP flood; enable a web application firewall (WAF) with rate limiting.
   • CSYN flood; enable SYN cookies on the server.
   • DDNS amplification attack; block all UDP traffic from the internet.
   Reveal Solution Discussion Select an answer first
4. 38application · medium

   A media streaming service is hit by a DDoS attack that sends a high volume of UDP packets to random ports on their public-facing servers. The servers' CPU usage spikes as they process the incoming packets, and legitimate streaming traffic is degraded. The company wants to mitigate the attack without affecting legitimate UDP traffic, which uses a specific port range. Which approach should they take?

   • AConfigure the firewall to drop all UDP traffic except the required streaming port range.
   • BEnable UDP flood protection on the router using rate limiting per source IP.
   • CMove the streaming service to a different IP address and update DNS.
   • DIncrease the server's network buffer sizes to handle more UDP packets.
   Reveal Solution Discussion Select an answer first
5. 39foundation · easy

   What is the primary goal of a denial-of-service (DoS) attack?

   • ATo modify the content of a website
   • BTo disrupt the availability of a service or resource
   • CTo steal sensitive data from the target system
   • DTo gain unauthorized administrative access to a server
   Reveal Solution Discussion Select an answer first
6. 40application · medium

   A company wants to improve its DDoS resilience but has a limited budget. They have a web application that is critical to their business. Which approach provides the best balance of cost and effectiveness?

   • ABuild an in-house DDoS mitigation system using open-source tools.
   • BRely solely on the ISP's DDoS mitigation, which is included in the bandwidth contract.
   • CImplement a hybrid solution: use a low-cost DDoS protection service for volumetric attacks and maintain on-premises rate limiting for application-layer attacks.
   • DPurchase the most expensive DDoS protection service available to ensure complete protection.
   Reveal Solution Discussion Select an answer first