nerdexam
CompTIA

PT0-002 · Question #491

During a security assessment, a penetration tester decides to use the following Python snippet: Which of the following best describes what the penetration tester is trying to achieve?

The correct answer is A. Web server denial of service. Without the actual Python snippet, inferring from the correct answer, the penetration tester is attempting to perform a Web server denial of service attack by overwhelming the server with a flood of requests.

Attacks and Exploits

Question

During a security assessment, a penetration tester decides to use the following Python snippet:

Which of the following best describes what the penetration tester is trying to achieve?

Options

  • AWeb server denial of service
  • BWeb application firewall bypass
  • CWeb server response time estimation
  • DWeb server latency estimation

How the community answered

(35 responses)
  • A
    71% (25)
  • B
    9% (3)
  • C
    3% (1)
  • D
    17% (6)

Why each option

Without the actual Python snippet, inferring from the correct answer, the penetration tester is attempting to perform a Web server denial of service attack by overwhelming the server with a flood of requests.

AWeb server denial of serviceCorrect

A Python snippet designed to continuously and rapidly send requests to a web server, often using multiple threads or processes, is a common technique for launching a denial of service (DoS) attack. The objective is to consume server resources and bandwidth, thereby making the server unavailable to legitimate users.

BWeb application firewall bypass

Web application firewall bypasses typically involve crafting specific payloads to circumvent security rules, not simply overwhelming a server with generic requests.

CWeb server response time estimation

Web server response time estimation involves measuring the delay of specific requests and does not typically involve flooding the server with traffic designed to cause disruption.

DWeb server latency estimation

Web server latency estimation focuses on measuring network delays between client and server, a passive observation, rather than actively disrupting service with excessive requests.

Concept tested: Denial of Service (DoS) attack principles

Source: https://www.cloudflare.com/learning/ddos/what-is-a-dos-attack/

Topics

#Denial of Service (DoS)#Web Server Attacks#Penetration Testing Techniques#Python Scripting

Community Discussion

No community discussion yet for this question.

Full PT0-002 Practice