312-50V12 Question #167: Real Exam Question with Answer & Explanation

Question

An audacious attacker is targeting a web server you oversee. He intends to perform a Slow HTTP POST attack, by manipulating 'a' HTTP connection. Each connection sends a byte of data every 'b' second, effectively holding up the connections for an extended period. Your server is designed to manage 'm' connections per second, but any connections exceeding this number tend to overwhelm the system. Given 'a=100' and variable 'm', along with the attacker's intention of maximizing the attack duration 'D=a*b', consider the following scenarios. Which is most likely to result in the longest duration of server unavailability?

Options

• Am=90, b=15: The server can manage 90 connections per second, but the attacker's 100
• Bm=105, b=12: The server can manage 105 connections per second, more than the attacker's 100
• Cm=110, b=20: Despite the attacker sending 100 connections, the server can handle 110
• Dm=95, b=10: Here, the server can handle 95 connections per second, but it falls short against the