Eccouncil 312-39 Exam - Topic 2 Question 86 Discussion

Actual exam question for Eccouncil's 312-39 exam

Question #: 86
Topic #: 2

Ray is a SOC analyst in a company named Queens Tech. One Day, Queens Tech is affected by a DoS/DDoS attack. For the containment of this incident, Ray and his team are trying to provide additional bandwidth to the network devices and increasing the capacity of the servers.

What is Ray and his team doing?

ABlocking the Attacks

BDiverting the Traffic

CDegrading the services

DAbsorbing the Attack

Show Suggested Answer

Suggested Answer: D

by Belen at Jul 11, 2024, 02:42 PM

Limited Time Offer

25%

Off

Get Premium 312-39 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Cristen

3 months ago

I agree, absorbing the attack is the right approach!

upvoted 0 times

...

Emilio

3 months ago

Wait, can just adding bandwidth really help?

upvoted 0 times

...

Dianne

3 months ago

Sounds like a smart move to handle a DDoS!

upvoted 0 times

...

Bettina

4 months ago

Definitely not blocking the attacks, that's for sure.

upvoted 0 times

...

Noe

4 months ago

They're trying to absorb the attack by increasing capacity.

upvoted 0 times

...

Lacey

4 months ago

I’m a bit confused. I thought degrading services was more about intentionally limiting access, but this seems more proactive.

upvoted 0 times

...

Maurine

4 months ago

This sounds similar to a practice question we did on DDoS mitigation strategies. I think they might be diverting the traffic instead of just absorbing it.

upvoted 0 times

...

Theodora

4 months ago

I'm not entirely sure, but I feel like blocking the attacks would be more about filtering traffic rather than just adding capacity.

upvoted 0 times

...

Sommer

5 months ago

I remember we discussed how increasing bandwidth can help absorb the attack, so I think they might be trying to absorb it.

upvoted 0 times

...

Gregoria

5 months ago

I feel pretty good about this one. Increasing network and server capacity is a common strategy to absorb the impact of a DoS/DDoS attack, so I think the answer is "Absorbing the Attack".

upvoted 0 times

...

Veronika

5 months ago

Okay, let's think this through. Blocking the attacks doesn't seem right, since they're trying to provide more resources. Diverting the traffic could be an option, but the question specifically mentions increasing capacity, so I'm leaning towards "Absorbing the Attack" as the best answer.

upvoted 0 times

...

Shantay

5 months ago

Hmm, I'm a bit unsure here. Increasing bandwidth and server capacity could be a way to absorb the attack, but I'm not totally confident that's the right answer.

upvoted 0 times

...

Jerry

5 months ago

This seems like a straightforward question about incident response. I think the key is to identify the actions being taken to mitigate the DoS/DDoS attack.

upvoted 0 times

...

Bernardo

5 months ago

I think the key here is that the software should be able to be effectively integrated into the organization's workflow. That seems like the most important criteria for selecting COTS software.

upvoted 0 times

...

Chanel

5 months ago

Okay, I've got this. In a plan-driven organization, communication is likely to be formal and follow the chain of command. That makes option C the best answer here.

upvoted 0 times

...

Yen

5 months ago

Vulnerability mapping is a key step in the penetration testing process, but I can't quite remember where it fits in. Is it after the passive information gathering phase, or the network level discovery? Hmm, I'll have to review my notes on the penetration testing methodology.

upvoted 0 times

...

Arlette

5 months ago

This looks like a straightforward question about Bash scripting best practices. I'm pretty confident I know the answer, so I'll go with option A.

upvoted 0 times

...

Glenn

9 months ago

I'm going with 'Diverting the Traffic' (B). That's the classic move to handle a DoS/DDoS attack. Gotta keep those packets flowing, even if it means rerouting them through a few extra hops. It's like playing network Tetris!

upvoted 0 times

...

Denna

10 months ago

Whoa, 'Absorbing the Attack' (D)? That's like trying to drink from a fire hose! Ray and his team must be pretty confident in their network's resilience. I hope they have insurance for their internet bill!

upvoted 0 times

Glynda

8 months ago

D) Absorbing the Attack

upvoted 0 times

...

Lorrie

8 months ago

B) Diverting the Traffic

upvoted 0 times

...

Nettie

9 months ago

A) Blocking the Attacks

upvoted 0 times

...

Trinidad

10 months ago

Hmm, I'm not sure. 'Blocking the Attacks' (A) seems like the obvious choice, but maybe they're trying to 'Degrade the services' (C) to keep things running, albeit at a reduced capacity. It's a tough call.

upvoted 0 times

Denise

8 months ago

C) Degrading the services

upvoted 0 times

...

Maurine

9 months ago

B) Diverting the Traffic

upvoted 0 times

...

Mertie

9 months ago

A) Blocking the Attacks

upvoted 0 times

...

Carole

10 months ago

Definitely 'Diverting the Traffic' (B). By adding more bandwidth and capacity, they're redirecting the attack traffic away from the main systems. Smart move!

upvoted 0 times

Sean

9 months ago

Smart move to protect the main systems.

upvoted 0 times

...

Ozell

9 months ago

They are adding more bandwidth to redirect the attack traffic.

upvoted 0 times

...

Asuncion

10 months ago

Ray and his team are diverting the traffic.

upvoted 0 times

...

Arlyne

10 months ago

I think Ray and his team are trying to 'Absorb the Attack' (D) by providing additional bandwidth and increasing server capacity. This is a common strategy to mitigate the impact of a DoS/DDoS attack.

upvoted 0 times