Define DDoS Attack Concepts NSE6-FORTIDDOS-ADMINISTRATOR Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which statement correctly distinguishes a distributed denial-of-service (DDoS) attack from a denial-of-service (DoS) attack?

   • AA DDoS attack is always more severe than a DoS attack, regardless of the target or duration.
   • BA DDoS attack only targets application-layer protocols, while a DoS attack only targets network-layer protocols.
   • CA DDoS attack uses multiple compromised systems to flood a target, while a DoS attack typically uses a single source.
   • DA DDoS attack originates from a single source, while a DoS attack originates from multiple sources.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   What is the primary characteristic of a volumetric DDoS attack?

   • AIt exploits a vulnerability in a network protocol to crash a service.
   • BIt sends a small number of highly crafted requests to exhaust application resources.
   • CIt uses encryption to hide malicious traffic from detection.
   • DIt sends a high volume of traffic to saturate the target's bandwidth.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   Which category of DDoS attack focuses on exhausting the resources of a specific application, such as a web server?

   • AProtocol attack
   • BApplication-layer attack
   • CVolumetric attack
   • DAmplification attack
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A security engineer observes a large influx of UDP traffic to a company's web server. The source IPs are all public DNS resolvers, and the UDP payloads are large DNS responses. The engineer determines that the attackers sent small DNS queries with the victim's spoofed source IP to these resolvers. Which two techniques are being combined in this attack?

   • AVolumetric and application-layer.
   • BSpoofing and state-table exhaustion.
   • CBotnet and protocol exploitation.
   • DReflection and amplification.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A gaming company's 20 Gbps internet link is saturated, causing all services to become unreachable. The traffic consists of large UDP packets sent to random destination ports. The packets originate from many different source IPs, and the packet sizes are consistent with DNS responses. Which attack characteristic is most directly responsible for the link saturation?

   • AThe random destination ports on the target.
   • BThe many different source IP addresses.
   • CThe use of UDP as the transport protocol.
   • DThe amplification factor achieved through DNS reflection.
   Reveal Solution Discussion Select an answer first