DoS and DDoS Attack Methods EHE Practice Questions (Page 12)

Questions 56–60

1. 56application · medium

   A company's firewall logs show a massive influx of UDP packets to a single server on port 53. The packets are malformed DNS queries, and the server's CPU is maxed out processing them. The source IPs are spoofed. Which mitigation is most effective?

   • AEnable rate limiting on the firewall for UDP traffic to the server
   • BConfigure the firewall to drop UDP packets on port 53 from external sources
   • CDeploy a DDoS mitigation service that can filter the malicious UDP traffic
   • DChange the server's IP address
   Reveal Solution Discussion Select an answer first
2. 57expert · hard · select all that apply

   A cloud-hosted e-commerce platform is experiencing intermittent DDoS attacks that mix volumetric UDP floods and application-layer HTTP floods. The platform uses a load balancer and auto-scaling for web servers, but the attacks still cause downtime. The company wants to implement a comprehensive mitigation strategy. Select all that apply.

   • AImplement a Web Application Firewall (WAF) with bot detection and challenge mechanisms
   • BConfigure the load balancer to drop traffic from IP addresses that exceed a request rate threshold
   • CSubscribe to a DDoS protection service that provides always-on monitoring and on-demand scrubbing
   • DEnable auto-scaling to add more web servers during traffic spikes
   • EIncrease the cloud provider's bandwidth limit to the maximum available
   Check answers Discussion Select an answer first
4. 58foundation · easy

   What is the main resource that a Slowloris attack exhausts on a web server?

   • AThe number of available concurrent connections
   • BThe CPU processing power
   • CThe disk storage space
   • DThe network bandwidth
   Reveal Solution Discussion Select an answer first
5. 59foundation · easy

   What distinguishes a Distributed Denial of Service (DDoS) attack from a standard DoS attack?

   • AA DDoS attack only affects web servers, while a DoS attack affects any network device
   • BA DDoS attack always uses encryption, while a DoS attack does not
   • CA DDoS attack targets the application layer, while a DoS attack targets the network layer
   • DA DDoS attack uses multiple compromised systems to generate traffic, while a DoS attack uses a single source
   Reveal Solution Discussion Select an answer first
6. 60foundation · easy

   Which of the following is an example of a protocol-based DDoS attack?

   • ASYN flood
   • BDNS amplification
   • CHTTP flood
   • DSlowloris
   Reveal Solution Discussion Select an answer first