Introduction to DoS Attacks Answers 1. What is a primary characteristic of Distributed Denial-of-Service (DDoS) attacks? A. They only target application-layer vulnerabilities. B. They involve multiple sources creating malicious traffic. C. They are easily manageable with basic firewalls. D. They originate from a single compromised device. Answer: They involve multiple sources creating malicious traffic. (B) DDoS attacks leverage large numbers of compromised devices to amplify the attack's intensity. 2. Which method can effectively mitigate the impact of a DDoS attack? A. Load balancing traffic across multiple servers. B. Updating software only after an attack occurs. C. Prioritizing traffic to underused servers. D. Increased local storage capacity. Answer: Load balancing traffic across multiple servers. (A) Load balancing helps distribute the traffic, reducing the impact of an attack. 3. Advanced Persistent Threats (APTs) are primarily designed to target which of the following? A. Low-value consumer data. B. Publicly available software vulnerabilities. C. Popular social media platforms. D. High-value targets in organizations and governments. Answer: High-value targets in organizations and governments. (D) APTs aim to infiltrate and exfiltrate data from high-value targets, which enhances their impact. 4. What is one of the key features of Intrusion Detection and Prevention Systems (IDS/IPS)? A. They can only detect traffic but not block it. B. They can detect and block malicious traffic. C. They are effective in isolating single-source attacks. D. They require physical access to monitor the network. Answer: They can detect and block malicious traffic. (B) IDS/IPS systems are designed to both identify and mitigate malicious traffic in real time. 5. How can network security measures best help against unauthorized access? A. By allowing all incoming traffic. B. By implementing firewalls and access controls. C. By increasing internet bandwidth significantly. D. By reducing the use of encryption. Answer: By implementing firewalls and access controls. (B) Firewalls and access controls are essential in preventing unauthorized access to the network. 6. What is the primary goal of a Denial-of-Service (DoS) attack? A. To steal sensitive data from users B. To improve the performance of a website C. To disrupt the normal operation of a network or service D. To install malicious software on a target system Answer: To disrupt the normal operation of a network or service (C) Denial-of-Service attacks aim to overwhelm a network or service, rendering it unavailable to legitimate users. 7. Which type of DoS attack specifically sends incomplete HTTP requests to consume server resources? A. Slowloris B. UDP Flood C. HTTP POST Flood D. SYN Flood Answer: Slowloris (A) The Slowloris attack is designed to send incomplete HTTP requests, gradually consuming server resources. 8. What characterizes flooding attacks in DoS attacks? A. Overwhelming the target with a large volume of traffic B. Targeting specific software flaws unknown to the vendor C. Exploiting application vulnerabilities D. Sending very few packets over an extended time Answer: Overwhelming the target with a large volume of traffic (A) Flooding attacks aim to overwhelm the target's resources with a massive volume of traffic. 9. What attack method utilizes third-party systems to amplify attacks? A. Reflection Attack B. ICMP Flood C. UDP Flood D. SYN Flood Answer: Reflection Attack (A) Reflection attacks use third-party systems to send malicious traffic to the intended target. 10. What type of attack uses the TCP three-way handshake but never completes the connection? A. HTTP Flood B. ICMP Flood C. Application Layer Attack D. SYN Flood Answer: SYN Flood (D) The SYN Flood exploits the TCP three-way handshake by sending SYN packets while not completing the connection. 11. Which of the following is a potential impact of a successful DoS attack on a business? A. Enhanced customer trust B. Financial losses due to downtime C. Improved service efficiency D. Increased website traffic Answer: Financial losses due to downtime (B) DoS attacks can lead to significant financial losses for businesses due to service disruptions and lost transactions. 12. Which of the following is NOT a method for mitigating DoS attacks? A. Using botnets for traffic generation B. Traffic Filtering C. Implementing adaptive security policies D. Monitoring network traffic patterns Answer: Using botnets for traffic generation (A) Using botnets is a method used to execute DoS attacks, while the other options are mitigation strategies. 13. What is a characteristic of application layer DoS attacks? A. They are typically easier to detect than others B. They rely solely on traffic saturation C. They exploit network infrastructure weaknesses D. They target specific vulnerabilities in applications Answer: They target specific vulnerabilities in applications (D) Application layer DoS attacks focus on specific vulnerabilities within applications or protocols.