A Denial-of-Service (DoS) attack is mounted with the objective of causing a negative impact on the performance of a computer or network. It is also known as network saturation attack or bandwidth consumption attack. Attackers perform DoS attacks by sending a large number of protocol packets to a network. The problems caused by a DoS attack are as follows:

l Saturation of network resources l Disruption of connections between two computers, thereby preventing communications between services l Disruption of services to a specific computer l Failure to access a Web site l Increase in the amount of spam Which of the following can be used as countermeasures against DoS attacks? Each correct answer represents a complete solution. Choose all that apply.

Question

A Denial-of-Service (DoS) attack is mounted with the objective of causing a negative impact on the performance of a computer or network. It is also known as network saturation attack or bandwidth consumption attack. Attackers perform DoS attacks by sending a large number of protocol packets to a network. The problems caused by a DoS attack are as follows:

l Saturation of network resources l Disruption of connections between two computers, thereby preventing communications between services l Disruption of services to a specific computer l Failure to access a Web site l Increase in the amount of spam Which of the following can be used as countermeasures against DoS attacks? Each correct answer represents a complete solution. Choose all that apply.

Accepted Answer

A. Blocking undesired IP addresses Blocking undesired IP addresses at the firewall or perimeter prevents known malicious sources from consuming bandwidth and resources, directly mitigating saturation attacks. B. Applying router filtering Applying router filtering (such as ingress/egress filtering per BCP38) drops spoofed or unwanted packets before they reach the target, reducing the volume of DoS traffic. C. Disabling unneeded network services Disabling unneeded network services reduces the number of open ports and processes that can be exploited or overwhelmed, shrinking the attack surface for resource exhaustion. D. Permitting network access only to desired traffic Permitting only desired traffic via access control lists or firewall rules ensures that only legitimate traffic reaches the network, blocking unsolicited flood traffic by default.

A Denial-of-Service (DoS) attack is mounted with the objective of causing a negative impact on the performance of a computer or network. It is also known as network saturation attack or bandwidth cons

Question

Options

How the community answered

Why each option

Topics

Community Discussion