If an attacker forges a large number of users to launch a DDoS attack on a business server, which of the following is an effective measure for false source attacks?

Question

Options

• ASource Authentication Technology
• BCDN caching
• CLoad balancing technology
• DIntelligent DNS scheduling

• A
  72% (13)
• B
  17% (3)
• C
  6% (1)
• D
  6% (1)

Explanation

Source Authentication Technology (A) directly counters false source attacks - also known as IP spoofing - by verifying that packets genuinely originate from the claimed source address, discarding forged ones before they can overwhelm the target server.

Why the distractors fall short:

• B. CDN caching improves content delivery performance and can absorb some traffic volume, but it has no mechanism to authenticate or reject packets with spoofed source IPs.
• C. Load balancing distributes traffic across multiple servers to prevent overload, but it still forwards all traffic - including spoofed packets - and doesn't address the forgery itself.
• D. Intelligent DNS scheduling routes users to optimal servers based on geography or health, but operates at the DNS resolution layer and cannot validate the source addresses of packets in flight.

Memory tip: Think "fight fakes with facts" - a false source attack is defeated by source authentication, which literally checks whether the source is telling the truth. The other three options manage or distribute traffic but none verify it, so they can't stop an attacker who simply lies about where packets come from.

No community discussion yet for this question.