6.2 - Understand Network Attacks (e.g., Distributed Denial of Service (DDoS), Man-In-The-Middle (MITM), Domain Name System (DNS) Cache Poisoning) SSCP Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   An online gaming company is preparing for the launch of a new multiplayer title. The security team anticipates a large-scale DDoS attack targeting the game's authentication servers. The company wants to absorb volumetric attacks while keeping latency low for legitimate players. Which approach best balances these requirements?

   • APlace a stateful firewall directly in front of the authentication servers
   • BConfigure the authentication servers to rate-limit all incoming connections
   • CIncrease the bandwidth of the data center uplink to 100 Gbps
   • DRoute all game traffic through a CDN with anycast-based DDoS mitigation
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which of the following is a key countermeasure against man-in-the-middle (MITM) attacks?

   • AFlushing the DNS cache regularly
   • BUsing a content delivery network (CDN)
   • CDeploying a network access control (NAC) system
   • DUsing encryption to protect the confidentiality and integrity of communications
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A university's IT team discovers that the campus DNS resolver has been returning incorrect IP addresses for several popular websites. The team suspects DNS cache poisoning. The university wants to prevent this from recurring while minimizing disruption to the campus community. Which action should the team take first?

   • ADisable recursive DNS queries from external networks
   • BFlush the DNS resolver cache and enable DNSSEC validation
   • CDeploy an IDPS to monitor DNS traffic and alert on anomalies
   • DConfigure the resolver to use a different upstream DNS provider
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which capability distinguishes a next-generation firewall (NGFW) from a traditional stateful firewall?

   • AThe ability to log all network traffic
   • BThe ability to inspect application-layer traffic and identify applications regardless of port
   • CThe ability to block traffic based on IP addresses
   • DThe ability to track the state of active connections
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   Which scenario best illustrates a man-in-the-middle (MITM) attack?

   • AAn attacker floods a web server with SYN packets, exhausting its connection table.
   • BAn attacker modifies the DNS records of a domain to point to a malicious IP address.
   • CAn attacker positions a rogue access point to capture and forward traffic between a user and a legitimate server.
   • DAn attacker sends a phishing email to a user to obtain their login credentials.
   Reveal Solution Discussion Select an answer first