An organization's web server is experiencing intermittent outages. The network team notices that the server receives a massive number of TCP SYN packets from many different source IPs, but the connections are never completed. The server's connection table fills up, and legitimate users cannot connect. What type of attack is this, and what is the best immediate mitigation?

Distributed denial-of-service (DDoS); block all traffic from the source IPs

Directory traversal attack; apply input validation

SYN flood (a type of DoS); enable SYN cookies on the server

Brute force attack; implement account lockout

EC-CouncilCertified Ethical Hacker

Domain 5Objective 1

Hacking Web Servers CEH Practice Questions (Page 9)

Part of the Web Application Hacking domain, which makes up ~8% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~8–13 in this domain), expect 2–3 from this objective — we provide 41 practice questions to prepare you well beyond it. (estimate)

41questions here

9free pages

6concepts

Questions 41–41

41application · medium
An organization's web server is experiencing intermittent outages. The network team notices that the server receives a massive number of TCP SYN packets from many different source IPs, but the connections are never completed. The server's connection table fills up, and legitimate users cannot connect. What type of attack is this, and what is the best immediate mitigation?
Select an answer first

Finished these 1 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.

Hacking Web Servers CEH Practice Questions (Page 9)

Questions 41–41

Keep studying — Web Application Hacking