Cyber EOP - DoS, DDoS & Zero-Day DDoS By Mr. B

What is the primary purpose of a Denial-of-Service (DoS) attack?

• To gain unauthorized access

• To install malware

• To disrupt or disable services

• To steal sensitive data

Answer explanation

The primary purpose of a Denial-of-Service (DoS) attack is to disrupt or disable services, making them unavailable to users. This is achieved by overwhelming the target with traffic or requests.

Which of the following is a common method used in DoS attacks?

• Buffer Overflow Attacks

• Phishing

• Ransomware

• Keylogging

Answer explanation

Buffer Overflow Attacks are a common method in DoS attacks as they exploit vulnerabilities to crash or slow down a system, making it unavailable to users. Other options like Phishing, Ransomware, and Keylogging serve different purposes.

What distinguishes a Distributed Denial-of-Service (DDoS) attack from a DoS attack?

• DDoS attacks are less aggressive

• DDoS attacks use multiple sources

• DDoS attacks are easier to track

• DDoS attacks use a single source

Answer explanation

A Distributed Denial-of-Service (DDoS) attack is characterized by using multiple sources to overwhelm a target, unlike a DoS attack, which originates from a single source. This makes DDoS attacks more difficult to mitigate.

What is a characteristic of a Slowloris attack?

• It targets outdated software

• It keeps connections open indefinitely

• It overwhelms a network with traffic

• It uses multiple slave computers

Answer explanation

A Slowloris attack is characterized by keeping connections open indefinitely, which allows it to exhaust server resources without overwhelming the network with traffic.

What does the term 'Zero-Day' refer to in the context of DDoS attacks?

• Old software that is no longer supported

• Attacks that occur on weekends

• Newly launched software with vulnerabilities

• Attacks that are easily detectable

Answer explanation

The term 'Zero-Day' refers to newly launched software that has vulnerabilities, which can be exploited by attackers before the developers release a fix. This makes it a critical concern in the context of DDoS attacks.

Which attack specifically targets older operating systems?

• Ping of Death

• Buffer Overflow

• Teardrop

• SYN Flood

Answer explanation

The Teardrop attack specifically targets older operating systems by sending fragmented packets that they cannot reassemble, leading to crashes. This vulnerability is not present in modern systems, making it unique to older ones.

What is a potential business risk of a DoS attack?

• Increased customer satisfaction

• Enhanced brand reputation

• Improved system performance

• Legal and financial issues

Answer explanation

A DoS attack can lead to legal and financial issues for a business due to service disruptions, potential loss of revenue, and liability for failing to protect customer data, making this the most relevant risk.

How can a company stay protected from DDoS attacks?

• By limiting user access

• By ignoring suspicious activity

• By increasing bandwidth

• By reducing server capacity

Answer explanation

Increasing bandwidth helps absorb the traffic from DDoS attacks, making it harder for attackers to overwhelm the server. This proactive measure enhances the company's ability to maintain service availability during an attack.

What is a common feature of managed security services?

• No need for updates

• Focus on physical security only

• Limited response to threats

• 24/7 monitoring of systems

Answer explanation

A common feature of managed security services is 24/7 monitoring of systems, ensuring continuous oversight and rapid response to potential threats, unlike the other options which are inaccurate.

What is a characteristic of a Ping of Death attack?

• It sends oversized packets

• It uses minimal bandwidth

• It targets only local networks

• It is a form of phishing

Answer explanation

A Ping of Death attack is characterized by sending oversized packets that exceed the maximum allowed size, causing target systems to crash or become unresponsive. This makes "It sends oversized packets" the correct choice.