CNX-001 · Question #56
Which of the following is an effective mitigation against Distributed Denial-of-Service (DDoS) attacks in a cloud environment?
The correct answer is D. Utilizing cloud-based DDoS protection services. DDoS attacks overwhelm resources with massive volumes of traffic that no single server or network can absorb alone. Cloud-based DDoS protection services (e.g., AWS Shield, Azure DDoS Protection, Cloudflare Magic Transit) are specifically engineered to mitigate these attacks at…
Question
Which of the following is an effective mitigation against Distributed Denial-of-Service (DDoS) attacks in a cloud environment?
Options
- AImplementing strong password policies
- BUsing web application firewalls (WAFs)
- CDeploying intrusion detection systems (IDS)
- DUtilizing cloud-based DDoS protection services
How the community answered
(64 responses)- A5% (3)
- B3% (2)
- C2% (1)
- D91% (58)
Explanation
DDoS attacks overwhelm resources with massive volumes of traffic that no single server or network can absorb alone. Cloud-based DDoS protection services (e.g., AWS Shield, Azure DDoS Protection, Cloudflare Magic Transit) are specifically engineered to mitigate these attacks at scale using anycast routing, traffic scrubbing centers, and terabit-level absorption capacity - capabilities far beyond what on-premises tools can offer. WAFs (B) operate at the application layer (Layer 7) and can mitigate some application-level floods but are ineffective against volumetric attacks. Strong password policies (A) address authentication, not availability. IDS (C) detects and alerts on attacks but does not actively block or absorb DDoS traffic.
Topics
Community Discussion
No community discussion yet for this question.