SY0-301 · Question #663
An administrator notices an unusual spike in network traffic from many sources. The administrator suspects that:
The correct answer is B. it is the beginning of a DDoS attack. A Distributed Denial of Service (DDoS) attack is characterized by a large volume of traffic originating from many different sources (compromised hosts or botnets) targeting a single system or network. The key indicator here is 'many sources,' which distinguishes DDoS from a…
Question
An administrator notices an unusual spike in network traffic from many sources. The administrator suspects that:
Options
- Ait is being caused by the presence of a rogue access point.
- Bit is the beginning of a DDoS attack.
- Cthe IDS has been compromised.
- Dthe internal DNS tables have been poisoned.
How the community answered
(51 responses)- A2% (1)
- B92% (47)
- C2% (1)
- D4% (2)
Explanation
A Distributed Denial of Service (DDoS) attack is characterized by a large volume of traffic originating from many different sources (compromised hosts or botnets) targeting a single system or network. The key indicator here is 'many sources,' which distinguishes DDoS from a regular DoS attack. A rogue access point would not generate a multi-source traffic spike. A compromised IDS would affect monitoring, not generate inbound traffic. DNS poisoning would redirect traffic but not cause a multi-source spike against the administrator's own network.
Topics
Community Discussion
No community discussion yet for this question.