DoS and DDoS Attack Methods EHE Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A legacy server in a manufacturing plant crashes repeatedly after receiving a single ICMP packet that is larger than the maximum allowed size. The packet appears to be fragmented and reassembled into an oversized payload. Which countermeasure would prevent this specific attack?

   • AEnable ICMP rate limiting on the router
   • BUpdate the operating system and apply vendor patches
   • CDisable IP fragmentation on the server
   • DBlock all ICMP traffic at the firewall
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A small e-commerce company's web server becomes unresponsive during a sales event. The network team notices a massive number of half-open TCP connections consuming the server's connection table, while bandwidth utilization remains normal. Which type of attack is most likely occurring, and what immediate mitigation should the team prioritize?

   • AHTTP flood; implement rate limiting on the web application firewall
   • BSmurf attack; disable IP-directed broadcast on routers
   • CUDP flood; filter inbound UDP traffic on the firewall
   • DSYN flood; enable SYN cookies and reduce the SYN-ACK retry timeout
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A large online service is experiencing a DDoS attack that combines a high-volume UDP flood and an application-layer HTTP flood. The company has a limited budget and must maintain service availability for legitimate users. They currently have an on-premises firewall and a load balancer. Which approach is the most cost-effective and effective?

   • ASubscribe to a cloud-based DDoS mitigation service that scrubs traffic
   • BBlock all UDP traffic at the firewall
   • CImplement rate limiting on the firewall and load balancer
   • DPurchase additional bandwidth and deploy more servers to absorb the attack
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Which attack is an example of an application-layer DDoS attack?

   • ASYN flood
   • BICMP flood
   • CUDP flood
   • DHTTP flood
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   How does an NTP amplification attack generate high-volume traffic?

   • ABy sending large NTP packets directly to the victim
   • BBy exploiting a vulnerability in the NTP protocol to crash the server
   • CBy sending NTP queries to the victim's server to exhaust its CPU
   • DBy sending small queries to NTP servers with a spoofed source IP, causing large responses to be sent to the victim
   Reveal Solution Discussion Select an answer first