Define DDoS Attack Concepts NSE6-FORTIDDOS-ADMINISTRATOR Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A company is hit by a DDoS attack. The attack traffic originates from thousands of IP addresses across different countries, and the packets are all valid TCP SYN packets with no spoofing. The company's ISP confirms that the traffic is coming from real, compromised devices. Which statement best describes the role of these devices in the attack?

   • AThey are reflectors that amplify the attack traffic.
   • BThey are application-layer clients sending legitimate requests.
   • CThey form a botnet that is coordinated to send traffic.
   • DThey are part of a single DoS attack from one source.
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A security team is investigating a DDoS attack. They find that the attackers first scanned the internet for vulnerable IoT devices, then installed malware on them, and finally issued a command to all devices to send traffic to the victim. Which phase of the attack lifecycle does the 'installation of malware' represent?

   • ARecruitment.
   • BReconnaissance.
   • CAmplification.
   • DExecution.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   What is typically the first phase in the lifecycle of a DDoS attack?

   • ARecruitment
   • BCleanup
   • CReconnaissance
   • DExecution
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   How does a SYN flood attack work?

   • AIt sends malformed HTTP requests to crash a web server.
   • BIt sends a flood of UDP packets to random ports on the target.
   • CIt sends a large number of incomplete TCP connection requests to exhaust the server's connection queue.
   • DIt sends oversized ICMP packets to cause a buffer overflow.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   Which of the following is an example of a protocol-based DDoS attack vector?

   • AHTTP GET flood
   • BSYN flood
   • CDNS query flood
   • DUDP flood
   Reveal Solution Discussion Select an answer first