DoS and DDoS Attack Methods EHE Practice Questions (Page 10)

Questions 46–50

1. 46application · medium

   A university's network becomes congested with ICMP echo replies. The replies are all destined for a single server, but they originate from many different hosts on the campus network. The administrator suspects a Smurf attack. What configuration change on the network devices would most directly stop this attack?

   • AEnable ICMP rate limiting on the target server's firewall
   • BDisable ICMP echo replies on the target server
   • CConfigure the routers to drop directed broadcast traffic
   • DChange the target server's IP address
   Reveal Solution Discussion Select an answer first
2. 47foundation · easy

   What is the primary goal of an HTTP flood attack?

   • ATo crash the server with oversized ICMP packets
   • BTo exhaust the web server's resources by sending a large number of HTTP requests
   • CTo saturate the network bandwidth with UDP packets
   • DTo fill the TCP connection queue with half-open connections
   Reveal Solution Discussion Select an answer first
4. 48application · medium

   A news website becomes slow, and the server shows thousands of established TCP connections that send partial HTTP headers and then pause. The connections remain open for long periods, exhausting the web server's thread pool. The traffic appears to come from many different IP addresses. Which mitigation is most effective against this specific attack pattern?

   • ADeploy a web application firewall that drops connections with incomplete headers after a short timeout
   • BIncrease the maximum number of connections per IP and reduce the connection timeout
   • CBlock all traffic from non-standard user agents
   • DUse a CDN to cache all website content
   Reveal Solution Discussion Select an answer first
5. 49application · medium

   A company is preparing for a potential DDoS attack. They want to implement a mitigation strategy that can handle both volumetric attacks and application-layer attacks. They have a limited budget and want to minimize the impact on legitimate users. Which strategy is most appropriate?

   • AImplement a load balancer with health checks
   • BDeploy an on-premises firewall with rate limiting
   • CUse a CDN with DDoS protection
   • DPurchase additional bandwidth and servers
   Reveal Solution Discussion Select an answer first
6. 50application · medium

   A legacy server crashes after receiving a series of ICMP packets that are larger than the maximum allowed size. The packets appear to be fragmented and reassembled into an oversized packet that overflows the server's buffer. What is the most effective countermeasure?

   • ADisable ICMP fragmentation on the server
   • BBlock all ICMP traffic at the firewall
   • CApply a vendor patch that fixes the buffer overflow vulnerability
   • DIncrease the server's buffer size
   Reveal Solution Discussion Select an answer first