nerdexam
GIAC

GCIH · Question #79

James works as a Database Administrator for Techsoft Inc. The company has a SQL Server 2005 computer. The computer has a database named Sales. Users complain that the performance of the database has…

The correct answer is A. Denial-of-Service. A Denial-of-Service attack floods a network or server with excessive traffic, which explains the observed increase in network utilization and the resulting degradation in SQL Server database performance.

Incident Response & Cyber Kill Chain

Question

James works as a Database Administrator for Techsoft Inc. The company has a SQL Server 2005 computer. The computer has a database named Sales. Users complain that the performance of the database has deteriorated. James opens the System Monitor tool and finds that there is an increase in network traffic. What kind of attack might be the cause of the performance deterioration?

Options

  • ADenial-of-Service
  • BInjection
  • CInternal attack
  • DVirus

How the community answered

(20 responses)
  • A
    75% (15)
  • B
    10% (2)
  • C
    10% (2)
  • D
    5% (1)

Why each option

A Denial-of-Service attack floods a network or server with excessive traffic, which explains the observed increase in network utilization and the resulting degradation in SQL Server database performance.

ADenial-of-ServiceCorrect

A Denial-of-Service attack works by overwhelming a target system or network with a high volume of traffic or requests, consuming available bandwidth and system resources. The System Monitor showing a spike in network traffic is a classic indicator of a DoS attack in progress. This resource exhaustion directly causes the performance degradation reported by database users.

BInjection

A SQL injection attack manipulates database queries through malicious input and would more likely cause unauthorized data access or corruption rather than a noticeable spike in network traffic.

CInternal attack

An internal attack describes a threat originating from inside the organization and is a threat source category, not a specific attack type that uniquely explains high network traffic.

DVirus

A virus infects files and can degrade performance, but it would not specifically manifest as increased network traffic in System Monitor without other supporting indicators.

Concept tested: Identifying DoS attack via network traffic symptoms

Source: https://learn.microsoft.com/en-us/sql/relational-databases/performance/monitor-and-tune-for-performance

Topics

#DoS identification#network traffic anomaly#performance degradation analysis#database attacks

Community Discussion

No community discussion yet for this question.

Full GCIH Practice