Exam 7: Denial-Of-Service Attacks

If an organization is dependent on network services it should consider mirroring and ________ these servers over multiple sites with multiple network connections.

Using forged source addresses is known as _________.

A ______ is a graphical puzzle used to attempt to identify legitimate human initiated interactions.

A ______ triggers a bug in the system's network handling software causing it to crash and the system can no longer communicate over the network until this software is reloaded.

There is very little that can be done to prevent a flash crowd.

The four lines of defense against DDoS attacks are: attack prevention and preemption, attack detection and filtering, attack source traceback and identification and _______.

______ attempts to monopolize all of the available request handling threads on the Web server by sending HTTP requests that never complete.

The source of the attack is explicitly identified in the classic ping floodattack.

_______ bandwidth attacks attempt to take advantage of the disproportionally large resource consumption at a server.

The standard protocol used for call setup in VoIP is the ________ Protocol.

A cyberslam is an application attack that consumes significantresources, limiting the server's ability to respond to valid requests fromother users.

______ attacks are a variant of reflector attacks and also involve sending a packet with a spoofed source address for the target system to intermediaries.

Requests and _______ are the two different types of SIP messages.

The ICMP echo response packets generated in response to a ping flood using randomly spoofed source addresses is known as _______ traffic.

The best defense against broadcast amplification attacks is to block the use of _______ broadcasts.

The attacker needs access to a high-volume network connection for aSYN spoof attack.

A _____ is an action that prevents or impairs the authorized use of networks, systems, or applications by exhausting resources such as central processing units, memory, bandwidth, and disk space.

In both direct flooding attacks and ______ the use of spoofed source addresses results in response packets being scattered across the Internet and thus detectable.

A characteristic of reflection attacks is the lack of _______ traffic.

In a _______ attack the attacker creates a series of DNS requests containing the spoofed source address for the target system.