200-201 · Question #367
Which evasion method involves performing actions slower than normal to prevent detection?
The correct answer is A. timing attack. The evasion method that involves performing actions slower than normal to prevent detection is a timing attack, specifically referring to 'low and slow' techniques.
Question
Which evasion method involves performing actions slower than normal to prevent detection?
Options
- Atiming attack
- Btraffic fragmentation
- Cresource exhaustion
- Dtunneling
How the community answered
(31 responses)- A94% (29)
- B3% (1)
- C3% (1)
Why each option
The evasion method that involves performing actions slower than normal to prevent detection is a timing attack, specifically referring to 'low and slow' techniques.
A timing attack, in the context of evasion, involves slowing down actions or spreading them over a longer period to avoid triggering rate-based detection mechanisms or to appear as benign, normal network activity.
Traffic fragmentation involves breaking packets into smaller pieces to bypass detection, not necessarily slowing down the overall action.
Resource exhaustion is a type of denial-of-service attack that aims to consume system resources, not an evasion method characterized by slow actions.
Tunneling encapsulates one protocol inside another to bypass firewalls or hide traffic, not an evasion method based on timing.
Concept tested: Evasion techniques - timing attacks
Topics
Community Discussion
No community discussion yet for this question.