nerdexam
EC-Council

312-50V11 · Question #938

A DDOS attack is performed at layer 7 to take down web infrastructure. Partial HTTP requests are sent to the web infrastructure or applications. Upon receiving a partial request, the target servers…

The correct answer is A. Slowloris attack. Slowloris is a DDoS attack tool used to perform layer-7 DDoS attacks to take down web infrastructure. It is distinctly different from other tools in that it uses perfectly legitimate HTTP traffic to take down a target server. In Slowloris attacks, the attacker sends partial…

Denial of Service

Question

A DDOS attack is performed at layer 7 to take down web infrastructure. Partial HTTP requests are sent to the web infrastructure or applications. Upon receiving a partial request, the target servers opens multiple connections and keeps waiting for the requests to complete. Which attack is being described here?

Options

  • ASlowloris attack
  • BSession splicing
  • CPhlashing
  • DDesynchronization

How the community answered

(46 responses)
  • A
    96% (44)
  • C
    2% (1)
  • D
    2% (1)

Explanation

Slowloris is a DDoS attack tool used to perform layer-7 DDoS attacks to take down web infrastructure. It is distinctly different from other tools in that it uses perfectly legitimate HTTP traffic to take down a target server. In Slowloris attacks, the attacker sends partial HTTP requests to the target web server or application. Upon receiving the partial requests, the target server opens multiple connections and waits for the requests to complete. However, these requests remain incomplete, causing the target server’s maximum concurrent connection pool to be filled up and additional connection attempts to be denied.

Topics

#Slowloris#layer 7 DDoS#partial HTTP requests#application layer attack

Community Discussion

No community discussion yet for this question.

Full 312-50V11 Practice