6.2 - Understand Network Attacks (e.g., Distributed Denial of Service (DDoS), Man-In-The-Middle (MITM), Domain Name System (DNS) Cache Poisoning) SSCP Practice Questions (Page 6)

Questions 26–30

1. 26application · medium

   Users at a mid-sized company report that typing a well-known banking URL into their browsers sometimes loads a fraudulent login page that closely mimics the real bank. The issue is intermittent and affects multiple users across different offices. An IDPS alert shows unusual DNS responses from the company's internal resolver. Which action would most directly address the root cause?

   • ADeploy an IDPS sensor on the internal network to monitor for malicious DNS traffic
   • BBlock outbound DNS traffic from user workstations to external resolvers
   • CFlush the DNS resolver cache and configure it to use DNSSEC validation
   • DConfigure the internal resolver to forward all queries to a public DNS service
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   Which of the following is a common attack vector used in a distributed denial of service (DDoS) attack?

   • AAmplification via publicly accessible services, such as DNS or NTP
   • BSending a crafted email with a malicious attachment to the target user
   • CExploiting a buffer overflow to execute arbitrary code on the target server
   • DPerforming a port scan to identify open services on the target
   Reveal Solution Discussion Select an answer first
4. 28expert · hard

   A cloud-based SaaS provider is experiencing a DDoS attack that targets its API endpoints with a mix of volumetric UDP floods and application-layer HTTP requests. The provider wants to mitigate both types of attacks while maintaining low latency for legitimate API calls. The provider has a limited budget and cannot afford a dedicated DDoS mitigation appliance. Which approach best meets these requirements?

   • AIncrease the cloud instance size and add more API servers to handle the load
   • BUse a cloud-based DDoS protection service that provides both volumetric and application-layer mitigation
   • CDeploy a stateful firewall with rate limiting in front of the API endpoints
   • DConfigure the API gateway to require API keys for all requests
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   A hospital allows employees to connect personal laptops to the guest Wi-Fi network. After a series of malware infections spread from compromised personal devices to the medical records system, the IT director wants to prevent unmanaged devices from reaching internal resources. Which control would most directly enforce this policy at the network layer?

   • AConfigure the guest Wi-Fi with WPA2-PSK and share the password with all employees
   • BDeploy a network access control (NAC) solution that quarantines devices failing a posture assessment before granting access
   • CRequire employees to sign an acceptable-use policy before connecting to the guest network
   • DInstall a host-based firewall on the medical records server to block traffic from the guest subnet
   Reveal Solution Discussion Select an answer first
6. 30foundation · easy

   Which countermeasure is specifically designed to absorb and distribute massive amounts of DDoS traffic across a global network of servers?

   • AA stateful inspection firewall
   • BA network access control (NAC) system
   • CA content delivery network (CDN)
   • DAn intrusion detection system (IDS)
   Reveal Solution Discussion Select an answer first