MCQs

Disclaimer:

Educational Use Only:

The website links provided are to be used strictly for educational and knowledge-gaining purposes only.

No Misuse:

Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.

Respect for Websites and Businesses:

Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.

Acknowledge Value of Knowledge:

Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.

No Endorsement:

The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.

User Responsibility:

By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.

What is the primary objective of a Denial-of-Service (DoS) attack?
a. Unauthorized access
b. Encryption of data
c. Disrupt service availability
d. Infecting with malware
Answer: c. Disrupt service availabilityexamradar+2
Which layer of the OSI model is commonly targeted by bandwidth flooding DoS attacks?
a. Layer 2
b. Layer 3
c. Layer 6
d. Layer 7
Answer: b. Layer 3sanfoundry+1
What differentiates a DoS attack from a Distributed Denial-of-Service (DDoS) attack?
a. Attack duration
b. Number of attackers
c. Attack speed
d. Level of encryption
Answer: b. Number of attackerswikipedia+1
Which of the following best describes a SYN flood attack?
a. Floods with UDP packets
b. Floods with half-open TCP connections
c. Floods with ARP requests
d. Floods with ICMP replies
Answer: b. Floods with half-open TCP connectionsscribd+1
Which term refers to a network of compromised devices used to launch DDoS attacks?
a. Proxy farm
b. Botnet
c. Server farm
d. Cloud cluster
Answer: b. Botnetsanfoundry+1
Which layer does an application-layer DoS attack mainly target?
a. Layer 3
b. Layer 4
c. Layer 7
d. Layer 2
Answer: c. Layer 7startupdefense+1
A volumetric DoS attack aims to:
a. Exhaust server computation
b. Fill up disk space
c. Consume network bandwidth
d. Target encryption keys
Answer: c. Consume network bandwidthrapid7+1
What is a primary method for detecting DoS attacks?
a. Traffic analysis
b. Port scanning
c. Patch management
d. Data mining
Answer: a. Traffic analysisdeviceauthority+1
Which device is typically deployed at the network perimeter for DoS attack mitigation?
a. Mail server
b. Load balancer
c. Traffic filter
d. File server
Answer: c. Traffic filterscribd+1
DNS amplification is a type of:
a. Smurf attack
b. TCP state attack
c. DoS amplification
d. Cross-site attack
Answer: c. DoS amplificationdeviceauthority+1
The “ping of death” attack consists of:
a. Sending normal ICMP packets
b. Sending oversized or malformed ICMP packets
c. Sending HTTP POSTs
d. Spamming emails
Answer: b. Sending oversized or malformed ICMP packetsowasp+1
What is a symptom of a DoS attack on a web server?
a. Slow response time
b. Unauthorized updates
c. Increased CPU speed
d. Decreased security logs
Answer: a. Slow response timeextrahop+1
Which prevention technique blocks illegitimate requests before reaching the intended target?
a. Encryption
b. Traffic filtering
c. Load shedding
d. Data compression
Answer: b. Traffic filteringscribd+1
Which of these is a form of DoS attack?
a. Bandwidth flooding
b. Vulnerability attack
c. Connection flooding
d. All of the above
Answer: d. All of the abovestartupdefense+1
The process of making a network resource unavailable to its users is known as:
a. Eavesdropping
b. DoS
c. Replay
d. Backdoor
Answer: b. DoSpaloaltonetworks+1
An attacker uses a SYN flood to:
a. Exploit DNS
b. Exhaust server resources
c. Decrypt traffic
d. Modify packets
Answer: b. Exhaust server resourcesstartupdefense+1
Which protocol is commonly abused in reflection/amplification DoS attacks?
a. HTTP
b. DNS
c. FTP
d. SMTP
Answer: b. DNSdeviceauthority+1
What is the main purpose of an upstream filtering center?
a. Encrypt traffic
b. Filter out attack traffic before it reaches the victim
c. Speed up responses
d. Redirect emails
Answer: b. Filter out attack traffic before it reaches the victimwikipedia+1
What is the effect of ICMP flood attacks?
a. Disrupts DNS cache
b. Consumes network bandwidth
c. Installs ransomware
d. Alters routing tables
Answer: b. Consumes network bandwidthowasp+1
What role does a firewall play in DoS prevention?
a. Filters traffic based on rules
b. Encrypts data
c. Compresses files
d. Logs email activity
Answer: a. Filters traffic based on rulesrapid7+1
Which DoS attack specifically exploits the stateful nature of TCP connections?
a. Volumetric attack
b. TCP State Exhaustion attack
c. Application layer attack
d. Smurf attack
Answer: b. TCP State Exhaustion attackscribd+1
In DoS attacks, what does “resource exhaustion” mean?
a. Depleting storage
b. Depleting CPU, memory, or bandwidth
c. Disabling encryption
d. Overclocking CPUs
Answer: b. Depleting CPU, memory, or bandwidthpaloaltonetworks+1
What type of flood attack uses UDP packets?
a. Buffer overflow
b. UDP flood
c. Email flood
d. HTTP flood
Answer: b. UDP floodsumologic+1
Which device typically receives the overwhelming traffic in a DoS attack?
a. Attacker’s PC
b. Victim server
c. Intermediary router
d. Firewall
Answer: b. Victim serverextrahop+1
Which detection mechanism uses content pattern recognition?
a. Intrusion Prevention System (IPS)
b. VPN
c. Proxy
d. IDS
Answer: a. Intrusion Prevention System (IPS)wikipedia+1
What is a key challenge in defending against DoS attacks?
a. Distinguishing between legitimate and malicious traffic
b. Generating traffic
c. Patching updates
d. Increasing disk storage
Answer: a. Distinguishing between legitimate and malicious trafficrapid7+1
Which layer is NOT commonly targeted by DoS attacks?
a. Physical
b. Network
c. Application
d. Transport
Answer: a. Physicalowasp+1
What is the function of application front-end hardware?
a. Analyze and filter incoming data packets
b. Encrypt data
c. Perform backups
d. Compress network traffic
Answer: a. Analyze and filter incoming data packetswikipedia+1
Which characteristic is typical of DoS attacks?
a. They use a single system
b. They always require authentication
c. They distribute malware
d. They only target wireless networks
Answer: a. They use a single systemexamradar+1
Firewalls may be ineffective against complex DoS attacks because:
a. They are too deep in the network
b. They cannot log
c. They encrypt traffic
d. They always block legitimate traffic
Answer: a. They are too deep in the networkdeviceauthority+1
Which technique expands a denial-of-service attack through intermediary amplifying servers?
a. Blackholing
b. Reflection
c. Fragmentation
d. Cloaking
Answer: b. Reflectionscribd+1
Typical sign of a DoS attack on a business website:
a. Website unresponsive or offline
b. Increased storage usage
c. Lower network latency
d. Higher encryption
Answer: a. Website unresponsive or offlineextrahop+1
What is the primary preventative purpose of rate limiting?
a. Block malware
b. Prevent resource exhaustion
c. Store encryption keys
d. Speed up responses
Answer: b. Prevent resource exhaustionrapid7+1
Which tool is focused on detecting and mitigating DoS/DDoS traffic?
a. DoS Defense System (DDS)
b. VPN gateway
c. Backup server
d. SNMP monitor
Answer: a. DoS Defense System (DDS)wikipedia+1
A zombie computer in a botnet is controlled by:
a. Handlers
b. Legitimate users
c. Network switches
d. Targeted routers
Answer: a. Handlersist.psu+1
What environment is especially vulnerable to DoS in 802.11 wireless networks?
a. Secure intranets
b. Open Wi-Fi hotspots
c. Encrypted LAN
d. VPNs
Answer: b. Open Wi-Fi hotspotsist.psu+1
What makes application layer DoS attacks difficult to detect?
a. Legitimate-looking requests
b. Encrypted packet content
c. UDP packet headers
d. Infected firmware
Answer: a. Legitimate-looking requestsdeviceauthority+1
What is IP spoofing’s role in DoS?
a. Forging source IP to mask attacker’s identity
b. Encrypting traffic
c. Fragmenting data
d. Compressing files
Answer: a. Forging source IP to mask attacker’s identitystartupdefense+1
What defense can minimize DDoS traffic from entering a data center?
a. Upstream scrubbing center
b. DNS caching
c. Host patching
d. Encrypted storage
Answer: a. Upstream scrubbing centerwikipedia+1
What OSI layer is directly targeted by SYN flood attacks?
a. Layer 2
b. Layer 3
c. Layer 4
d. Layer 7
Answer: c. Layer 4startupdefense+1
What characterizes Smurf attacks?
a. ICMP echo requests sent to broadcast address
b. HTTP post requests
c. FTP bounce
d. NXDOMAIN spoofing
Answer: a. ICMP echo requests sent to broadcast addresswayground+1
In DoS, which method causes switch MAC tables to overflow and degrade switching?
a. MAC flooding
b. DNS spoofing
c. SSL stripping
d. ARP spoofing
Answer: a. MAC floodingowasp+1
What’s the result of teardrop attacks?
a. System crash due to fragmented packets
b. DNS poisoning
c. RSA key extraction
d. Slow HTTP response
Answer: a. System crash due to fragmented packetsowasp+1
Which is an example of a state-exhaustion denial-of-service attack?
a. SYN flood
b. ICMP flood
c. DNS amplification
d. HTTP POST flood
Answer: a. SYN floodscribd+1
Which defense tool may not be effective for application layer DoS if it relies only on traffic volume thresholds?
a. Classic firewall
b. Application front-end hardware
c. Load balancer
d. VPN concentrator
Answer: a. Classic firewalldeviceauthority+1
Which OSI layer is almost never targeted by network-based DoS?
a. Application
b. Network
c. Physical
d. Transport
Answer: c. Physicalstartupdefense+1
Main offensive approach in DoS:
a. Overwhelming server resources
b. Escalating privileges
c. Sniffing packets
d. Exploiting firmware
Answer: a. Overwhelming server resourcesrapid7+1
A distinguishing feature of a DDoS over DoS is:
a. Originates from multiple sources
b. Always uses UDP
c. Needs valid credentials
d. Targets FTP servers only
Answer: a. Originates from multiple sourcesexamradar+1
What is the best response to a minor DoS attack?
a. Apply firewall rules
b. Install new servers
c. Change DNS provider
d. Reboot routers
Answer: a. Apply firewall ruleswikipedia+1
What is “blackholing” as a DoS mitigation?
a. Route malicious traffic to nowhere
b. Log attacking IPs
c. Encrypt traffic
d. Block cookies
Answer: a. Route malicious traffic to nowheredeviceauthority+1

Blog

Systemethic Technologies

Leave a Reply Cancel reply

Useful links

Other Terms & Policies

Contact Info