6.2 - Understand Network Attacks (e.g., Distributed Denial of Service (DDoS), Man-In-The-Middle (MITM), Domain Name System (DNS) Cache Poisoning) SSCP Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A regional bank's public-facing web portal is intermittently unreachable during business hours. Network logs show a flood of TCP SYN packets to the portal's IP address from thousands of distinct source IPs, with no corresponding ACK responses. The bank's existing stateful firewall is CPU-saturated and dropping legitimate traffic. Which solution would most directly restore availability while minimizing impact on legitimate users?

   • AConfigure the firewall to drop all TCP packets with the SYN flag set
   • BBlock all inbound TCP port 443 traffic from IP addresses outside the bank's country
   • CDeploy a CDN with DDoS mitigation in front of the portal and enable SYN cookie protection on the firewall
   • DIncrease the firewall's connection table size and extend the TCP timeout from 60 to 300 seconds
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which characteristic is most typical of a distributed denial of service (DDoS) attack?

   • AIt relies on tricking a user into revealing credentials through a fraudulent website.
   • BIt intercepts and alters communications between two parties without their knowledge.
   • CIt uses multiple compromised systems to generate a coordinated flood of traffic toward a target.
   • DIt originates from a single source IP address and uses a single attack vector.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   Which countermeasure is most effective in preventing an attacker from successfully impersonating a server in a man-in-the-middle (MITM) attack?

   • AMutual authentication
   • BRate limiting
   • CTraffic filtering
   • DDNSSEC
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   Which deployment consideration is most important when placing an intrusion prevention system (IPS) on a network?

   • AIt should be placed out-of-band to avoid introducing latency.
   • BIt should be placed only on the internal network, not at the perimeter.
   • CIt must be placed inline so that traffic passes through it for inspection and blocking.
   • DIt should be placed on a management VLAN to avoid affecting user traffic.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   Which DDoS countermeasure limits the number of requests a client can make to a server within a specified time period?

   • ARate limiting
   • BDNSSEC
   • CCache flushing
   • DMutual authentication
   Reveal Solution Discussion Select an answer first