A systems administrator is advised that an external web server is not functioning property. The administrator reviews the following firewall logs containing traffic going to the web server: Which of…

Question

Exhibit

Options

• ADDoS
• BDirectory traversal
• CBrute-force
• DHTTPS downgrade

• A
  78% (18)
• B
  9% (2)
• C
  4% (1)
• D
  9% (2)

Explanation

A Distributed Denial of Service (DDoS) attack floods a server with overwhelming traffic from multiple sources, which aligns with a web server "not functioning properly" and firewall logs showing a massive volume of inbound connection attempts - the classic symptom pattern. Directory traversal (B) involves manipulating file path inputs to access unauthorized directories, which wouldn't appear as bulk traffic floods in firewall logs. Brute-force (C) targets authentication by repeatedly trying credentials, producing repetitive login attempts rather than general traffic saturation. HTTPS downgrade (D) is a protocol manipulation attack that forces insecure connections, leaving no obvious flood signature in firewall logs.

Memory tip: When a web server goes down and firewall logs show a tsunami of traffic from many IPs, think DDoS = Drown the server - the "D" stands for both Distributed and Down (as in, the server goes down).

No community discussion yet for this question.