Exam SY0-601 topic 1 question 497 discussion

Actual exam question from CompTIA's SY0-601

Question #: 497
Topic #: 1

A security analyst notices an unusual amount of traffic hitting the edge of the network. Upon examining the logs, the analyst identifies a source IP address and blocks that address from communicating with the network. Even though the analyst is blocking this address, the attack is still ongoing and coming from a large number of different source IP addresses. Which of the following describes this type of attack?

A. DDoS
B. Privilege escalation
C. DNS poisoning
D. Buffer overflow

Show Suggested Answer

Suggested Answer: A 🗳️

by CastratedMonk at July 5, 2023, 9:28 a.m.

Comments

Submit Cancel

ApplebeesWaiter1122

Highly Voted 1 year, 11 months ago

Selected Answer: A

The scenario described in the question is indicative of a Distributed Denial of Service (DDoS) attack. In a DDoS attack, the attacker floods a target system or network with a massive amount of traffic, overwhelming its resources and causing services to become unavailable to legitimate users. In this case, the security analyst identified and blocked a specific source IP address involved in the attack, but the attack is still ongoing from multiple other source IP addresses. DDoS attacks typically involve a large number of compromised or maliciously controlled devices (such as botnets) that are distributed across various locations, making it difficult to stop the attack by simply blocking individual sources.

upvoted 6 times

...