nerdexam
GIAC

GCIH · Question #95

You are hired as a Database Administrator for Jennifer Shopping Cart Inc. You monitor the server health through the System Monitor and found that there is a sudden increase in the number of logins…

The correct answer is D. Denial-of-service. A sudden surge in login attempts against a database server is characteristic of a Denial-of-Service attack, which floods the server with requests to exhaust resources.

Incident Response & Cyber Kill Chain

Question

You are hired as a Database Administrator for Jennifer Shopping Cart Inc. You monitor the server health through the System Monitor and found that there is a sudden increase in the number of logins. Which of the following types of attack has occurred?

Options

  • AInjection
  • BVirus
  • CWorm
  • DDenial-of-service

How the community answered

(39 responses)
  • A
    5% (2)
  • B
    18% (7)
  • C
    5% (2)
  • D
    72% (28)

Why each option

A sudden surge in login attempts against a database server is characteristic of a Denial-of-Service attack, which floods the server with requests to exhaust resources.

AInjection

Injection attacks (e.g., SQL injection) manipulate query logic through malformed input and would not cause a measurable spike in the number of login connections to the server.

BVirus

A virus is malicious code that attaches to files and executes when triggered; it does not generate large volumes of login requests to a database server.

CWorm

A worm self-replicates across networks but its activity pattern typically appears as unusual network traffic or process activity, not as a surge in database login attempts.

DDenial-of-serviceCorrect

A Denial-of-Service attack works by overwhelming a target server with excessive requests, which can manifest as a sudden spike in login attempts detected via System Monitor. This flood of connections consumes server resources such as connection pools, CPU, and memory, degrading or denying service to legitimate users. The pattern of an abnormal, rapid increase in login count is a classic DoS indicator at the authentication layer.

Concept tested: Identifying DoS attacks via abnormal login metrics

Source: https://www.cisa.gov/news-events/news/understanding-denial-service-attacks

Topics

#denial of service#login flooding#system monitoring#attack identification

Community Discussion

No community discussion yet for this question.

Full GCIH Practice