nerdexam
(ISC)2

CSSLP · Question #124

Which of the following types of attacks is targeting a Web server with multiple compromised computers that are simultaneously sending hundreds of FIN packets with spoofed IP source IP addresses?

The correct answer is A. DDoS attack. A Distributed Denial of Service (DDoS) attack involves multiple compromised computers simultaneously flooding a target, such as a web server, with malicious traffic to disrupt its services.

Secure Software Concepts

Question

Which of the following types of attacks is targeting a Web server with multiple compromised computers that are simultaneously sending hundreds of FIN packets with spoofed IP source IP addresses?

Options

  • ADDoS attack
  • BEvasion attack
  • CInsertion attack
  • DDictionary attack

How the community answered

(35 responses)
  • A
    86% (30)
  • B
    3% (1)
  • C
    6% (2)
  • D
    6% (2)

Why each option

A Distributed Denial of Service (DDoS) attack involves multiple compromised computers simultaneously flooding a target, such as a web server, with malicious traffic to disrupt its services.

ADDoS attackCorrect

A Distributed Denial of Service (DDoS) attack is characterized by multiple compromised systems (bots) simultaneously sending a flood of traffic, such as a high volume of FIN packets with spoofed IP addresses, to a target web server. This overwhelming traffic consumes the server's resources, preventing legitimate users from accessing the service and causing a denial of service.

BEvasion attack

An evasion attack attempts to bypass security controls without being detected, which is distinct from overwhelming a server with traffic to deny service.

CInsertion attack

An insertion attack involves injecting malicious data into a legitimate data stream to trick a security device, not flooding a server with FIN packets.

DDictionary attack

A dictionary attack is a type of brute-force attack that tries common passwords from a dictionary to gain unauthorized access, completely unrelated to network traffic flooding.

Concept tested: Distributed Denial of Service (DDoS) attacks

Source: https://learn.microsoft.com/en-us/azure/security/fundamentals/ddos-best-practices

Topics

#DDoS attack#Denial of Service#Network security#Attack types

Community Discussion

No community discussion yet for this question.

Full CSSLP Practice