Network-Level Attacks (sniffing, DoS/DDoS, Session Hijacking) ECSS Practice Questions (Page 6)

Questions 26–30

1. 26application · medium

   A company's web server becomes unresponsive during a flash sale. Network monitoring shows a massive influx of UDP packets to port 53 from many different source IPs, and the server's network interface is saturated. Which type of attack is this?

   • ASYN flood
   • BDNS amplification DDoS
   • CARP poisoning
   • DHTTP GET flood
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   An attacker sends a link to a victim that, when clicked, sets the victim's session ID to a value known to the attacker. The victim then logs into a legitimate website, and the attacker uses the known session ID to access the victim's account. Which attack is this?

   • ATCP session hijacking
   • BMAC flooding
   • CSession fixation
   • DDNS spoofing
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   What is the immediate effect of MAC flooding on a switch?

   • AThe switch begins to forward all frames out of all ports, similar to a hub
   • BThe switch stops forwarding all traffic
   • CThe switch encrypts all traffic to prevent sniffing
   • DThe switch blocks all traffic from the attacker's MAC address
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   Which countermeasure is most effective in preventing session hijacking by protecting session tokens during transmission?

   • AUsing MAC address filtering
   • BDisabling cookies in the browser
   • CUsing longer session timeouts
   • DUsing HTTPS/TLS to encrypt traffic
   Reveal Solution Discussion Select an answer first
6. 30foundation · easy

   Which type of DoS attack is characterized by overwhelming the target with a massive volume of traffic?

   • AVolumetric attack
   • BTeardrop attack
   • CProtocol attack
   • DApplication-layer attack
   Reveal Solution Discussion Select an answer first