nerdexam
GIAC

GCIH · Question #315

based network. All client computers run the Windows XP operating system. The employees of the company complain that suddenly all of the client computers have started working slowly. Peter finds that…

The correct answer is B. Denial-of-Service (DoS) attack. A Denial-of-Service attack works by overwhelming a target system or network with excessive requests, degrading or halting normal operations for legitimate users.

Incident Response & Cyber Kill Chain

Question

based network. All client computers run the Windows XP operating system. The employees of the company complain that suddenly all of the client computers have started working slowly. Peter finds that a malicious hacker is attempting to slow down the computers by flooding the network with a large number of requests. Which of the following attacks is being implemented by the malicious hacker?

Options

  • ASQL injection attack
  • BDenial-of-Service (DoS) attack
  • CMan-in-the-middle attack
  • DBuffer overflow attack

How the community answered

(43 responses)
  • A
    5% (2)
  • B
    91% (39)
  • C
    2% (1)
  • D
    2% (1)

Why each option

A Denial-of-Service attack works by overwhelming a target system or network with excessive requests, degrading or halting normal operations for legitimate users.

ASQL injection attack

SQL injection targets database query inputs to manipulate data, not network bandwidth or system resources.

BDenial-of-Service (DoS) attackCorrect

A DoS attack is specifically designed to disrupt service availability by flooding a network or system with a high volume of requests, consuming resources until legitimate users experience slowdowns or complete outages. The scenario describes a malicious actor sending large numbers of requests to slow client computers, which is the defining characteristic of a DoS attack. No data theft or code execution is implied, only resource exhaustion.

CMan-in-the-middle attack

A man-in-the-middle attack intercepts and potentially alters communication between two parties rather than flooding a network with requests.

DBuffer overflow attack

A buffer overflow exploits memory handling in a specific application to execute arbitrary code, not flood a network with traffic.

Concept tested: Denial-of-Service attack identification

Source: https://www.cisa.gov/news-events/news/understanding-denial-service-attacks

Topics

#denial of service#network flooding#DoS detection

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full GCIH Practice