CAS-002 · Question #54
An ecommerce application on a Linux server does not properly track the number of incoming connections to the server and may leave the server vulnerable to which of following?
The correct answer is C. Denial of Service Attack. Failing to track and limit the number of incoming connections leaves a server vulnerable to a Denial of Service (DoS) attack (C). An attacker can open thousands of simultaneous connections, exhausting the server's connection table, memory, or CPU - preventing legitimate users…
Question
An ecommerce application on a Linux server does not properly track the number of incoming connections to the server and may leave the server vulnerable to which of following?
Options
- ABuffer Overflow Attack
- BStorage Consumption Attack
- CDenial of Service Attack
- DRace Condition
How the community answered
(40 responses)- A8% (3)
- C90% (36)
- D3% (1)
Explanation
Failing to track and limit the number of incoming connections leaves a server vulnerable to a Denial of Service (DoS) attack (C). An attacker can open thousands of simultaneous connections, exhausting the server's connection table, memory, or CPU - preventing legitimate users from accessing the service. A Buffer Overflow (A) exploits poor input validation, not connection tracking. Storage Consumption (B) involves filling up disk space, unrelated to connection counts. A Race Condition (D) is a concurrency flaw in code logic. The direct consequence of unlimited, untracked connections is resource exhaustion, which is the definition of DoS.
Topics
Community Discussion
No community discussion yet for this question.