Free Preparation Discussions
MENU
Eccouncil 312-50 Exam - Topic 9 Question 99 Discussion
Topic #: 9
A new wireless client is configured to join a 802.11 network. This client uses the same hardware and software as many of the other clients on the network. The client can see the network, but cannot connect. A wireless packet sniffer shows that the Wireless Access Point (WAP) is not responding to the association requests being sent by the wireless client. What is a possible source of this problem?
A Slow HTTP POST attack is a type of denial-of-service (DoS) attack that exploits the way web servers handle HTTP requests. The attacker sends a legitimate HTTP POST header to the web server, specifying a large amount of data to be sent in the request body. However, the attacker then sends the data very slowly, keeping the connection open and occupying the server's resources. The attacker can launch multiple such connections, exceeding the server's capacity to handle concurrent requests and preventing legitimate users from accessing the web server.
The attack duration D is given by the formula D = a * b, where a is the number of connections and b is the hold-up time per connection. The attacker intends to maximize D by manipulating a and b. The server can manage m connections per second, but any connections exceeding m will overwhelm the system. Therefore, the scenario that is most likely to result in the longest duration of server unavailability is the one where a > m and b is the largest. Among the four options, this is the case for option B, where a = 100, m = 90, and b = 15. In this scenario, D = 100 * 15 = 1500 seconds, which is the longest among the four options. Option A has a larger b, but a < m, so the server can handle the connections without being overwhelmed. Option C has a > m, but a smaller b, so the attack duration is shorter. Option D has a > m, but a smaller b and a smaller difference between a and m, so the attack duration is also shorter. Reference:
What is a Slow POST Attack & How to Prevent One? (Guide)
Mitigate Slow HTTP GET/POST Vulnerabilities in the Apache HTTP Server - Acunetix
What is a Slow Post DDoS Attack? | NETSCOUT
Sharika
3 months agoTrina
3 months agoMing
4 months agoAlyce
4 months agoTula
4 months agoElke
4 months agoAnnmarie
4 months agoGianna
5 months agoSherita
5 months agoLavonda
5 months agoPaz
5 months agoTabetha
5 months agoAlease
5 months agoCarol
10 months agoMattie
10 months agoMicaela
8 months agoArdella
8 months agoJill
9 months agoMeghan
9 months agoVincenza
10 months agoTamesha
10 months agoGeraldine
9 months agoTheron
9 months agoCarmen
9 months agoTamala
9 months agoClemencia
9 months agoSean
10 months agoViola
10 months agoRodolfo
11 months agoTy
11 months agoMelda
11 months ago