Define DDoS Attack Concepts NSE6-FORTIDDOS-ADMINISTRATOR Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Why do attackers use botnets to launch DDoS attacks?

   • ATo increase the attack's bandwidth and make it harder to block by filtering a single IP address.
   • BTo encrypt the attack traffic so it cannot be inspected.
   • CTo make the attack more stealthy by using low traffic volume.
   • DTo ensure the attack is launched from a single, powerful server.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A company's 1 Gbps internet connection is completely saturated. The traffic is a mix of UDP floods and ICMP floods. The source IPs are spoofed, and the packet sizes are large. Which mitigation strategy would be most effective in reducing the impact of this attack?

   • ARate-limiting ICMP and UDP traffic at the firewall.
   • BBlocking all traffic from the spoofed source IPs.
   • CUsing a DDoS mitigation service to absorb and filter the traffic.
   • DIncreasing the bandwidth of the internet connection.
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A network administrator notices that a firewall's connection table is full, causing legitimate traffic to be dropped. The traffic shows a high rate of TCP SYN packets with spoofed source IPs, and the firewall is responding with SYN-ACK but never receiving the final ACK. Which type of attack is this, and what is its primary target?

   • AApplication-layer attack targeting the web server CPU.
   • BProtocol attack targeting the firewall's state table.
   • CVolumetric attack targeting bandwidth.
   • DReflection attack targeting the firewall's bandwidth.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   What is a botnet?

   • AA tool used to scan networks for open ports.
   • BA type of malware that encrypts files and demands a ransom.
   • CA network of compromised computers that can be remotely controlled to launch attacks.
   • DA firewall rule that blocks malicious traffic.
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   What is the main goal of a protocol-based DDoS attack?

   • ATo consume the target's bandwidth with high traffic volume.
   • BTo overwhelm a specific application with legitimate-looking requests.
   • CTo encrypt traffic to evade security controls.
   • DTo exploit weaknesses in network protocols to consume server or network resources.
   Reveal Solution Discussion Select an answer first