212-89 · Question #16
An organization's customers are experiencing either slower network communication or unavailability of services. In addition, network administrators are receiving alerts from security tools such as…
The correct answer is C. netstat an. The netstat -an command is used to display network connections, routing tables, and a number of network interface statistics. It is particularly useful for identifying unusual volumes of traffic to and from a system, which can be indicative of a DoS/DDoS attack. The option -a…
Question
An organization's customers are experiencing either slower network communication or unavailability of services. In addition, network administrators are receiving alerts from security tools such as IDS/IPS and firewalls about a possible DoS/DDoS attack. In result, the organization requests the incident handling and response (IH&R) team further investigates the incident. The IH&R team decides to use manual techniques to detect DoS/DDoS attack. Which of the following commands helps the IH&R team to manually detect DoS/DDoS attack?
Options
- Anetstat -r
- Bnbtstat /c
- Cnetstat an
- Dnbtstat/S
How the community answered
(47 responses)- A4% (2)
- B6% (3)
- C72% (34)
- D17% (8)
Explanation
The netstat -an command is used to display network connections, routing tables, and a number of network interface statistics. It is particularly useful for identifying unusual volumes of traffic to and from a system, which can be indicative of a DoS/DDoS attack. The option -a shows all active connections and the TCP and UDP ports on which the computer is listening, and -n displays addresses and port numbers in numerical form. This can help the incident handling and response (IH&R) team to identify suspicious patterns, such as a large number of connections from a single source or to a specific port, which are common during DoS/DDoS attacks.
Topics
Community Discussion
No community discussion yet for this question.