Network-Level Attacks (sniffing, DoS/DDoS, Session Hijacking) ECSS Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   A company is experiencing a DDoS attack that is saturating its internet link. The attack is a volumetric attack using UDP amplification. The company has a firewall and an intrusion prevention system (IPS). Which mitigation strategy is most effective?

   • AUse a CDN or DDoS protection service to absorb the traffic.
   • BConfigure the firewall to block all UDP traffic.
   • CEnable SYN cookies on the firewall.
   • DIncrease the bandwidth of the internet link.
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A security analyst observes a DDoS attack where a small number of compromised IoT devices are sending large volumes of traffic to a public web server. The analyst wants to identify the command-and-control (C2) infrastructure. Which action is most useful?

   • AInspect the network traffic for communication between the IoT devices and a central server on non-standard ports
   • BBlock all UDP traffic to the web server
   • CIncrease the web server's bandwidth
   • DAnalyze the source IP addresses of the attacking devices for common patterns
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   A SYN flood attack is an example of which category of DoS attack?

   • AApplication-layer attack
   • BAmplification attack
   • CProtocol attack
   • DVolumetric attack
   Reveal Solution Discussion Select an answer first
5. 4expert · medium

   A security analyst is on a network segment with a hub and wants to capture traffic between two other hosts. The analyst wants to avoid being detected. Which approach is most appropriate?

   • AEnable promiscuous mode on the NIC and passively capture all traffic
   • BConfigure port mirroring on the hub
   • CPerform ARP spoofing to redirect traffic to the analyst's machine
   • DUse MAC flooding to force the hub into hub mode
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   What is the purpose of setting a short session timeout in a web application?

   • ATo prevent brute-force attacks on the login form
   • BTo increase server performance by reducing memory usage
   • CTo reduce the window of opportunity for an attacker to use a stolen session token
   • DTo ensure that users are always logged out after a fixed time
   Reveal Solution Discussion Select an answer first