nerdexam
GIAC

GSLC · Question #472

A user is sending a large number of protocol packets to a network in order to saturate its resources and to disrupt connections to prevent communications between services. Which type of attack is…

The correct answer is B. Denial-of-Service attack. A Denial-of-Service (DoS) attack intentionally floods a target network or system with excessive traffic or protocol packets to exhaust its resources and prevent legitimate communications.

Security Operations & Incident Response Leadership

Question

A user is sending a large number of protocol packets to a network in order to saturate its resources and to disrupt connections to prevent communications between services. Which type of attack is this?

Options

  • AVulnerability attack
  • BDenial-of-Service attack
  • CImpersonation attack
  • DSocial Engineering attack

How the community answered

(35 responses)
  • A
    3% (1)
  • B
    94% (33)
  • C
    3% (1)

Why each option

A Denial-of-Service (DoS) attack intentionally floods a target network or system with excessive traffic or protocol packets to exhaust its resources and prevent legitimate communications.

AVulnerability attack

A vulnerability attack exploits a specific flaw in software or hardware - such as a buffer overflow or unpatched CVE - to execute malicious code or gain unauthorized access, not to flood resources with volume traffic.

BDenial-of-Service attackCorrect

A DoS attack works by overwhelming a target's available bandwidth, processing capacity, or connection tables with a high volume of packets or requests, effectively saturating resources so that legitimate users and services are denied access. The defining characteristic is resource exhaustion intended to disrupt availability rather than to steal data or gain unauthorized access.

CImpersonation attack

An impersonation attack involves an adversary masquerading as a trusted user, device, or service to gain unauthorized access or extract sensitive information, which is fundamentally different from saturating network resources with packets.

DSocial Engineering attack

Social engineering attacks use psychological manipulation to deceive humans into revealing credentials or performing insecure actions, and do not involve sending large volumes of protocol packets to a network.

Concept tested: Denial-of-Service attack resource exhaustion via packet flooding

Source: https://www.cisa.gov/news-events/news/understanding-denial-service-attacks

Topics

#denial of service#resource exhaustion#network flooding#availability

Community Discussion

No community discussion yet for this question.

Full GSLC Practice