Denial of Service Quiz

Q1. DDoS attacks may be difficult to block solely at the firewall because:

Traffic can overwhelm the incoming Internet connection before it reaches useful processing points DNS is always encrypted Firewalls are always offline Firewalls cannot inspect packets

Q2. ReDoS specifically abuses:

Regular expressions with catastrophic backtracking Redis Redirects Recursive DNS

Q3. Which helps mitigate a volumetric DDoS?

Turning off logging Upstream scrubbing / CDN and rate limiting Disabling HTTPS Longer passwords

Q4. Anycast helps absorb DDoS traffic by:

Rate limiting per user Encrypting requests Distributing the same address across many geographic sites Compressing responses

Q5. SYN cookies help by allowing the server to:

Compress headers Cache responses Encrypt the handshake Avoid storing state for half-open connections

Q6. BCP38 / source address validation at the network edge prevents:

ARP poisoning Spoofed packets leaving a provider's network TLS downgrade SQL injection

Q7. Increasing bandwidth on critical connections can:

Help prevent them from going down during an attack Disable DNS Increase malware Create passwords

Q8. Knowing normal traffic helps identify:

Abnormal traffic and possible attacks Only DNS names Only file permissions Only user passwords

Q9. A honeypot can be used to:

Disable logging Replace all servers Increase production traffic Attract attackers and record their activity

Q10. A botnet is useful for DDoS because it provides:

Faster DNS Aggregated bandwidth and thousands of distinct source addresses Persistent storage Better encryption

Q11. An amplification attack relies on a protocol where:

Requests are encrypted Only TCP is used Responses are slow The response is much larger than the request

Q12. A DoS response plan should help an organization:

Prepare for and respond to attacks Disable backups Hide vulnerabilities Remove monitoring

Q13. Why is capacity planning part of DDoS resilience?

Headroom absorbs smaller attacks without any impact on users It improves encryption It reduces cost It simplifies logging

Q14. A ping of death attack historically worked by:

Sending too many pings Spoofing the source Using ICMP redirect Sending a malformed oversized packet that crashed the stack

Q15. An IoT botnet such as Mirai grew mainly by exploiting:

A kernel zero-day Physical access TLS flaws Default and hardcoded credentials on internet-exposed devices