Define DDoS Attack Concepts NSE6-FORTIDDOS-ADMINISTRATOR Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A security team is analyzing a DDoS attack. They find that the attackers first scanned the internet for vulnerable devices, then compromised them with malware, and finally issued a command to all devices to send traffic to the victim. Which phase of the attack lifecycle does the 'issuing the command to send traffic' represent?

   • ARecruitment.
   • BReconnaissance.
   • CAmplification.
   • DExecution.
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   Which attack is an example of an application-layer DDoS attack?

   • ASYN flood
   • BHTTP GET flood
   • CICMP flood
   • DUDP flood
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   What is the primary purpose of a distributed denial-of-service (DDoS) attack?

   • ATo modify the content of a website to spread false information.
   • BTo encrypt a target's data and demand a ransom for decryption.
   • CTo gain unauthorized access to a target system and steal sensitive data.
   • DTo disrupt the availability of a service or resource by overwhelming it with traffic from multiple sources.
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   An online banking portal is experiencing slow response times. The network link is only at 30% utilization, and the firewall's state table is healthy. However, the application server's CPU is at 100%. The traffic consists of many legitimate-looking HTTP POST requests to a complex transaction endpoint. Which attack vector is most likely being used?

   • AProtocol attack exhausting the state table.
   • BVolumetric attack saturating the network link.
   • CApplication-layer attack exhausting server CPU.
   • DReflection attack amplifying traffic to the server.
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   What is a key characteristic of application-layer DDoS attacks compared to volumetric attacks?

   • AThey use a small amount of traffic that is often indistinguishable from legitimate requests.
   • BThey require more bandwidth to be effective.
   • CThey are easier to detect because they use malformed packets.
   • DThey target network infrastructure rather than specific applications.
   Reveal Solution Discussion Select an answer first