Exam 312-50v12 topic 1 question 169 discussion

Actual exam question from ECCouncil's 312-50v12

Question #: 169
Topic #: 1

A well-resourced attacker intends to launch a highly disruptive DDoS attack against a major online retailer. The attacker aims to exhaust all the network resources while keeping their identity concealed. Their method should be resistant to simple defensive measures such as IP-based blocking. Based on these objectives, which of the following attack strategies would be most effective?

A. The attacker should instigate a protocol-based SYN flood attack, consuming connection state tables on the retailer's servers
B. The attacker should leverage a botnet to launch a Pulse Wave attack, sending high-volume traffic pulses at regular intervals
C. The attacker should initiate a volumetric flood attack using a single compromised machine to overwhelm the retailer's network bandwidth
D. The attacker should execute a simple ICMP flood attack from a single IP, exploiting the retailer's ICMP processing

Show Suggested Answer

Suggested Answer: B 🗳️

by DarioReymag at Feb. 6, 2024, 10:38 p.m.

Comments

Submit Cancel

qtygbapjpesdayazko

9 months, 1 week ago

Selected Answer: B

Keyword "DDOS. so is botnet to launch a Pulse Wave attack.

upvoted 1 times

...

qwerty100

10 months, 3 weeks ago

Selected Answer: B

It's b B. The attacker should leverage a botnet to launch a Pulse Wave attack, sending high-volume traffic pulses at regular intervals The clues are: - keeping their identity concealed - resistant to simple defensive measures such as IP-based blocking

upvoted 2 times

...

insaniunt

10 months, 3 weeks ago

Selected Answer: B

B. The attacker should leverage a botnet to launch a Pulse Wave attack, sending high-volume traffic pulses at regular intervals A Pulse Wave DDoS attack is a sophisticated variation that involves alternating periods of attack intensity and brief pauses, making it more challenging for traditional mitigation techniques to detect and respond effectively. This approach can help the attacker achieve their objective of exhausting network resources while concealing their identity. Additionally, leveraging a botnet enhances the attacker's ability to generate a massive volume of traffic, making it even more challenging for the targeted online retailer to mitigate the attack.

upvoted 2 times

...

ldixon84304

10 months, 4 weeks ago

I was thinking it was "D" due to anonymity being a requirement.

upvoted 1 times

...