DoS and DDoS Attack Methods EHE Practice Questions (Page 13)

Questions 61–63

1. 61expert · hard

   A social media platform is experiencing an application-layer DDoS attack that sends requests to a search endpoint that performs complex database queries. The requests come from a botnet of compromised browsers using WebSockets. The platform's load balancer distributes traffic to multiple application servers, but the database becomes the bottleneck. The team must mitigate the attack without affecting legitimate users. Which approach is most effective?

   • AUse a combination of rate limiting, caching, and a WAF, and scale the database read replicas
   • BAdd a caching layer for search results
   • CDeploy a Web Application Firewall that can detect and block abnormal search patterns
   • DImplement rate limiting on the search endpoint per user session
   Reveal Solution Discussion Select an answer first
2. 62application · medium

   A university network experiences a sudden spike in ICMP echo replies from many internal hosts to a single server, causing the server to become unreachable. The security team suspects an attacker spoofed the server's IP address and sent ICMP echo requests to the network's broadcast address. Which configuration change on the routers would directly prevent this type of attack from recurring?

   • AEnable ICMP rate limiting on the server's firewall
   • BImplement ingress filtering to drop packets with private source addresses
   • CDisable IP-directed broadcast on all routers
   • DConfigure access control lists to block all ICMP traffic
   Reveal Solution Discussion Select an answer first
3. 63foundation · easy

   What is the typical impact of a successful Ping of Death attack?

   • AThe target's connection queue is filled
   • BThe target system crashes or becomes unstable
   • CThe target's network bandwidth is saturated
   • DThe target's DNS cache is poisoned
   Reveal Solution Discussion Select an answer first