PT0-002 · Question #491
During a security assessment, a penetration tester decides to use the following Python snippet: Which of the following best describes what the penetration tester is trying to achieve?
The correct answer is A. Web server denial of service. Without the actual Python snippet, inferring from the correct answer, the penetration tester is attempting to perform a Web server denial of service attack by overwhelming the server with a flood of requests.
Question
During a security assessment, a penetration tester decides to use the following Python snippet:
Which of the following best describes what the penetration tester is trying to achieve?
Options
- AWeb server denial of service
- BWeb application firewall bypass
- CWeb server response time estimation
- DWeb server latency estimation
How the community answered
(35 responses)- A71% (25)
- B9% (3)
- C3% (1)
- D17% (6)
Why each option
Without the actual Python snippet, inferring from the correct answer, the penetration tester is attempting to perform a Web server denial of service attack by overwhelming the server with a flood of requests.
A Python snippet designed to continuously and rapidly send requests to a web server, often using multiple threads or processes, is a common technique for launching a denial of service (DoS) attack. The objective is to consume server resources and bandwidth, thereby making the server unavailable to legitimate users.
Web application firewall bypasses typically involve crafting specific payloads to circumvent security rules, not simply overwhelming a server with generic requests.
Web server response time estimation involves measuring the delay of specific requests and does not typically involve flooding the server with traffic designed to cause disruption.
Web server latency estimation focuses on measuring network delays between client and server, a passive observation, rather than actively disrupting service with excessive requests.
Concept tested: Denial of Service (DoS) attack principles
Source: https://www.cloudflare.com/learning/ddos/what-is-a-dos-attack/
Topics
Community Discussion
No community discussion yet for this question.