MENU
John works as a professional Ethical Hacker. He has been assigned a project to test the security of www.we-are-secure.com. He observes that the We-are-secure server is vulnerable to a special type of DoS attack and he makes the following suggestions to the security authority to protect the server from this DoS attack. The countermeasures against this type of DoS attack are as follows:
Disabling IP-directed broadcasts at the We-are-secure router
Configuring local computers so as not to respond to such ICMP packets that are configured to be sent to IP broadcast addresses
Which of the following DoS attacks has John discovered as a vulnerability for the We-are-secure security network?
Suggested Answer: A
Get Premium ECSS Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
14 comments · newest first
SA
Sabra
12 months ago
Agreed, disabling IP-directed broadcasts is key!
SO
Sommer
12 months ago
Wait, are we sure it’s a Smurf attack? Seems too obvious.
HA
Harley
12 months ago
No way, it's the Teardrop attack for sure!
TY
Tyisha
1 year ago
I think it's a Fraggle attack, though.
CA
Catalina
1 year ago
Definitely a Smurf attack! Classic vulnerability.
DI
Diane
1 year ago
I have a vague memory that the Jolt attack is related to a different kind of vulnerability, so I'm leaning towards Smurf as the answer.
FR
France
1 year ago
I practiced a question about DoS attacks, and I feel like the Teardrop attack is more about packet fragmentation, not this scenario.
PA
Paz
1 year ago
I'm not entirely sure, but I think the Fraggle attack is similar to the Smurf attack. They both use ICMP, right?
AL
Alaine
1 year ago
I remember studying DoS attacks, and the Smurf attack specifically involves IP-directed broadcasts, so I think that's the right answer.
GA
Gary
1 year ago
This looks like a tricky one. I'm not totally confident in my ability to solve this type of problem, but I'll give it my best shot and try to apply the concepts we learned.
SH
Shakira
1 year ago
Hmm, I'm a bit unsure about this one. I'll have to think it through carefully before answering.
KA
Kayleigh
1 year ago
I'm a bit confused about the options. Do we need to install Prometheus on a Windows VM or a Linux VM? And what's the difference between the Azure Diagnostics extension and the containerized agent for Azure Monitor?
CY
Cyril
1 year ago
Hmm, I'm a bit confused by the wording of this question. I'll need to review my notes on the different server types and their credential requirements.
LE
Leah
1 year ago
This seems like a tricky situation. I'd want to carefully consider the pros and cons of each option before deciding.