Question

Question 1

Which of the following statements about DDoS, reflector, and amplifier attacks is correct? Select all that apply only 3 answers are correct.

1. DDoS attacks often include a network of compromised systems to form a botnet.

2. In reflector attacks, intermediary systems are often chosen to be high-capacity servers to generate high volume of response packets.

3. Both reflector and amplifier attacks require intermediaries with a spoofed source address of the attacker's machine.

4. Common services used in amplifier attacks include ICMP and TCP/UDP.

5. One possible defence against amplifier attacks is to not allow directed broadcasts to be routed into a network from outside.

Question 2

Which of the following statements about DoS attacks is correct? Select all that apply only 2 answers are correct.

1. Source address spoofing is commonly used in DoS attacks to hide attacker's identity.

2. Ingress filtering on routers near the target system could be used as countermeasure against source address spoofing.

3. SYN spoofing attack aims at overloading the network capacity on the link to a server by generating a large number of SYN connection requests with forged source addresses.

4. Ping of death attack sends malformed packets using ping command with spoofed source address

Answer 1

Please Note: I have answered the first Question, according to HOMEWORKLIB RULES. Please Re-Post for receiving answers on the other questions.

Answer)
Q1. The following are the valid statements about DDoS, reflector, and amplifier attacks:

1. DDoS attacks often include a network of compromised systems to form a botnet.

2. In reflector attacks, intermediary systems are often chosen to be high-capacity servers to generate high volume of response packets.

5. One possible defense against amplifier attacks is to not allow directed broadcasts to be routed into a network from outside.

This is because the reflector attacks use the high-capacity server, DDoS uses network of compromised systems, and to defend against amplifier attacks we need to block directed broadcasts routed from outside.

**Please Hit Like if you appreciate my answer. For further doubts on the or answer please drop a comment, I'll be happy to help. Thanks for posting.**