What is the defining characteristic of a Ping of Death attack?

It sends UDP packets to random ports to consume resources

It sends TCP SYN packets to exhaust the connection queue

It sends an oversized ICMP packet that exceeds the maximum allowed size, causing the system to crash

It sends a flood of normal-sized ICMP packets to saturate bandwidth

What is the main impact of a SYN flood attack on a server?

Exhaustion of the server's memory and connection resources

Corruption of the server's file system

Saturation of the network bandwidth

Unauthorized access to the server

A company is experiencing a DDoS attack that uses DNS and NTP amplification. The attack is saturating the company's internet link. The company has a limited budget and wants to maintain service availability for its customers. Which mitigation strategy is most effective?

Increase the company's internet bandwidth

Deploy a DDoS mitigation service that can absorb the amplified traffic

Block all UDP traffic from DNS and NTP servers

Configure the company's DNS and NTP servers to ignore external queries

A network administrator notices that the company's internet link is saturated with ICMP echo request packets. The packets are all destined for a single web server, and the source IPs are spoofed. The web server is still responding, but other services are slow. What is the most effective immediate mitigation?

Increase the web server's bandwidth

Use a CDN to cache the web server's content

Configure the firewall to drop ICMP echo requests from external sources

Disable ICMP echo replies on the web server

What is the role of a botnet in a DDoS attack?

It provides a backup server for the target

It provides a way to encrypt the attack traffic

It provides a secure communication channel for the attacker

It provides a network of compromised devices that can be coordinated to send traffic to the target

EC-CouncilEthical Hacking Essentials

Domain 5Objective 2

DoS and DDoS Attack Methods EHE Practice Questions (Page 5)

Part of the Network-Level Attacks and Countermeasures domain, which makes up ~12% of our current practice bank.

63questions here

13free pages

17concepts

17 Concepts in This Objective

DoS attack definition
DDoS attack definition
Volumetric attacks
Protocol attacks
Application-layer attacks
SYN flood attack
UDP flood attack
ICMP flood attack
Ping of Death
Smurf attack
HTTP flood attack
Slowloris attack
DNS amplification attack
NTP amplification attack
Botnet role in DDoS
DDoS mitigation techniques
DoS/DDoS countermeasures

Questions 21–25

21foundation · easy
What is the defining characteristic of a Ping of Death attack?
Select an answer first
22foundation · easy
What is the main impact of a SYN flood attack on a server?
Select an answer first
23expert · hard
A company is experiencing a DDoS attack that uses DNS and NTP amplification. The attack is saturating the company's internet link. The company has a limited budget and wants to maintain service availability for its customers. Which mitigation strategy is most effective?
Select an answer first
24application · medium
A network administrator notices that the company's internet link is saturated with ICMP echo request packets. The packets are all destined for a single web server, and the source IPs are spoofed. The web server is still responding, but other services are slow. What is the most effective immediate mitigation?
Select an answer first
25foundation · easy
What is the role of a botnet in a DDoS attack?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to EHE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “EHE” is a trademark of its owner, used for identification only.