nerdexam
EC-Council

112-52 · Question #19

Which attack involves overwhelming a web server with traffic, making it inaccessible to legitimate users?

The correct answer is C. Denial of Service (DoS). Denial of Service (DoS) is correct because it describes precisely this attack vector - flooding a server with more requests than it can handle, exhausting its resources and denying access to legitimate users. The distractors each target a different vulnerability: SQL Injection (A

Attacks and Countermeasures

Question

Which attack involves overwhelming a web server with traffic, making it inaccessible to legitimate users?

Options

  • ASQL Injection
  • BCross-Site Scripting (XSS)
  • CDenial of Service (DoS)
  • DCross-Site Request Forgery (CSRF)

How the community answered

(26 responses)
  • A
    8% (2)
  • B
    4% (1)
  • C
    88% (23)

Explanation

Denial of Service (DoS) is correct because it describes precisely this attack vector - flooding a server with more requests than it can handle, exhausting its resources and denying access to legitimate users.

The distractors each target a different vulnerability: SQL Injection (A) exploits database query inputs to manipulate or extract data; Cross-Site Scripting/XSS (B) injects malicious scripts into web pages that execute in other users' browsers; and CSRF (D) tricks authenticated users into unknowingly submitting malicious requests on their behalf. None of these involve overwhelming traffic volume.

Memory tip: Think of DoS as a "digital traffic jam" - just as too many cars block a highway, too many requests block a server. The word Denial is the clue: the goal is to deny service, not steal data or hijack sessions.

Topics

#Denial of Service#DoS Attacks#Network Flooding#Web Server Attacks

Community Discussion

No community discussion yet for this question.

Full 112-52 Practice