nerdexam
GIAC

GCIH · Question #298

Mark works as a Network Administrator for Perfect Inc. The company has both wired and wireless networks. An attacker attempts to keep legitimate users from accessing services that they require. Mark…

The correct answer is D. DoS attack. A DoS (Denial of Service) attack is defined by the attacker's intent to prevent legitimate users from accessing required services, which matches the scenario exactly.

Incident Response & Cyber Kill Chain

Question

Mark works as a Network Administrator for Perfect Inc. The company has both wired and wireless networks. An attacker attempts to keep legitimate users from accessing services that they require. Mark uses IDS/IPS sensors on the wired network to mitigate the attack. Which of the following attacks best describes the attacker's intentions?

Options

  • AInternal attack
  • BReconnaissance attack
  • CLand attack
  • DDoS attack

How the community answered

(31 responses)
  • A
    6% (2)
  • C
    3% (1)
  • D
    90% (28)

Why each option

A DoS (Denial of Service) attack is defined by the attacker's intent to prevent legitimate users from accessing required services, which matches the scenario exactly.

AInternal attack

An internal attack describes the origin of a threat (from within the organization), not the attacker's method or goal of disrupting service availability.

BReconnaissance attack

A reconnaissance attack involves passively or actively gathering information about a target network, not actively blocking user access to services.

CLand attack

A Land attack is a specific exploit that sends a packet with identical source and destination IP addresses to crash or freeze a system, not a general category describing service denial.

DDoS attackCorrect

A Denial of Service attack is specifically aimed at overwhelming or blocking access to services so that legitimate users cannot use them. The deployment of IDS/IPS sensors to detect and mitigate the attack is a standard defensive response to DoS threats. The attacker's stated goal - keeping users from services they require - is the textbook definition of a DoS attack.

Concept tested: Denial of Service attack classification and intent

Source: https://www.cisa.gov/news-events/news/understanding-denial-service-attacks

Topics

#DoS attack#availability attack#IDS/IPS#service disruption

Community Discussion

No community discussion yet for this question.

Full GCIH Practice