350-501 · Question #367
Which type of attack is an application attack?
The correct answer is C. HTTP flood. An HTTP flood is an application layer attack that overwhelms a web server with legitimate-looking HTTP requests, consuming server resources and making it unavailable to users.
Question
Which type of attack is an application attack?
Options
- Aping of death
- BICMP (ping) flood
- CHTTP flood
- DSYN flood
How the community answered
(65 responses)- A2% (1)
- B8% (5)
- C86% (56)
- D5% (3)
Why each option
An HTTP flood is an application layer attack that overwhelms a web server with legitimate-looking HTTP requests, consuming server resources and making it unavailable to users.
A ping of death is a network layer (Layer 3/4) attack that exploits vulnerabilities in how systems handle oversized or malformed ICMP packets, potentially causing a system crash.
An ICMP (ping) flood is a network layer (Layer 3) denial-of-service attack that overwhelms a target with a high volume of ICMP echo requests, consuming bandwidth and system resources.
An HTTP flood is an application layer (Layer 7) attack that aims to overwhelm a server or application by sending a large volume of seemingly legitimate HTTP GET or POST requests, consuming server resources and rendering it unavailable to actual users. This attack specifically targets the web server application rather than the network infrastructure.
A SYN flood is a transport layer (Layer 4) denial-of-service attack that exploits the TCP three-way handshake by sending a flood of SYN requests without completing the final ACK, leaving the server's connection tables full.
Concept tested: Application layer DDoS attack types
Source: https://learn.microsoft.com/en-us/azure/ddos-protection/ddos-attack-types
Topics
Community Discussion
No community discussion yet for this question.