Multiple Choice Questions on Denial-of-Service Attacks

📚 Quick Study Guide

• 🛑 Denial-of-Service (DoS) Attack: An attack meant to make a machine or network resource unavailable to its intended users by temporarily or indefinitely disrupting services of a host connected to the Internet.
• 🌊 Distributed Denial-of-Service (DDoS) Attack: A type of DoS attack where the attack comes from many different sources.
• 🤖 Botnet: A network of private computers infected with malicious software and controlled as a group without the owners' knowledge, to perform DDoS attacks.
• 🎯 Target: Servers, websites, network infrastructure (routers, switches).
• 🛡️ Mitigation Techniques:
  • Rate Limiting: Limiting the number of requests a server will accept in a certain time frame.
  • Firewalls: Filtering malicious traffic based on predefined rules.
  • Content Delivery Networks (CDNs): Distributing content across multiple servers to absorb attack traffic.
  • Intrusion Detection Systems (IDS) and Intrusion Prevention Systems (IPS): Identifying and blocking malicious activity.
• 📊 Common DDoS Attack Types:
  • Volume-Based Attacks: Aim to consume bandwidth (e.g., UDP floods, ICMP floods).
  • Protocol Attacks: Exploit server resources (e.g., SYN floods, Ping of Death).
  • Application Layer Attacks: Target specific application vulnerabilities (e.g., HTTP floods, Slowloris).

💻 Practice Quiz

1. What is the primary goal of a Denial-of-Service (DoS) attack?
   1. A. To steal sensitive data from a server.
   2. B. To gain unauthorized access to a system.
   3. C. To make a service unavailable to legitimate users.
   4. D. To encrypt data for ransom.


2. What distinguishes a Distributed Denial-of-Service (DDoS) attack from a DoS attack?
   1. A. DDoS attacks use encryption, while DoS attacks do not.
   2. B. DDoS attacks originate from multiple sources, while DoS attacks come from a single source.
   3. C. DDoS attacks target databases, while DoS attacks target web servers.
   4. D. DDoS attacks are always successful, while DoS attacks are not.


3. What is a botnet commonly used for in the context of DDoS attacks?
   1. A. Distributing spam emails.
   2. B. Mining cryptocurrency.
   3. C. Launching large-scale DDoS attacks.
   4. D. Encrypting user data.


4. Which of the following is a common mitigation technique against DoS/DDoS attacks?
   1. A. Disabling firewalls.
   2. B. Increasing server vulnerability.
   3. C. Rate limiting.
   4. D. Ignoring suspicious traffic.


5. What type of DDoS attack aims to consume bandwidth with large volumes of traffic?
   1. A. Application Layer Attack
   2. B. Volume-Based Attack
   3. C. Protocol Attack
   4. D. Zero-Day Exploit


6. Which of the following attacks exploits server resources by sending a flood of SYN packets?
   1. A. HTTP Flood
   2. B. UDP Flood
   3. C. SYN Flood
   4. D. ICMP Flood


7. What type of DDoS attack targets specific vulnerabilities in web applications?
   1. A. Volume-Based Attack
   2. B. Protocol Attack
   3. C. Application Layer Attack
   4. D. Network Layer Attack