Denial of Service (DoS/DDoS) in Cybersecurity - Interactive Code Practice

Practice - 5 Tasks

1fill in blank

easy

Complete the sentence to explain what a Denial of Service (DoS) attack does.

Cybersecurity

A Denial of Service (DoS) attack aims to [1] a network or service so legitimate users cannot access it.

Drag options to blanks, or click blank then click option'

Adisrupt

Bstrengthen

Cmonitor

Dencrypt

Attempts:

3 left

💡 Hint

Common Mistakes

Confusing DoS with improving or protecting the service.

Thinking DoS encrypts data.

A DoS attack disrupts a network or service, making it unavailable to legitimate users.

2fill in blank

medium

Complete the sentence to identify the difference between DoS and DDoS attacks.

Cybersecurity

A Distributed Denial of Service (DDoS) attack uses [1] sources to overwhelm a target, unlike a DoS attack which uses a single source.

Drag options to blanks, or click blank then click option'

Asingle

Bencrypted

Csecure

Dmultiple

Attempts:

3 left

💡 Hint

Common Mistakes

Confusing DDoS with single-source attacks.

Thinking DDoS uses encrypted sources.

DDoS attacks come from many sources at once, making them harder to stop than single-source DoS attacks.

3fill in blank

hard

Fix the error in the description of a DoS attack method.

Cybersecurity

One common DoS attack method is called a [1] attack, which floods the target with excessive traffic.

Drag options to blanks, or click blank then click option'

Aphishing

Bspoofing

Cflood

Dransomware

Attempts:

3 left

💡 Hint

Common Mistakes

Confusing flood with phishing or ransomware.

Thinking spoofing is the main DoS attack method.

A flood attack overwhelms the target with too much traffic, causing service disruption.

4fill in blank

hard

Fill both blanks to complete the explanation of a common defense against DoS attacks.

Cybersecurity

To defend against DoS attacks, networks often use [1] to filter traffic and [2] to absorb large volumes of requests.

Drag options to blanks, or click blank then click option'

Afirewalls

Bencryption

Cload balancers

Dpasswords

Attempts:

3 left

💡 Hint

Common Mistakes

Choosing encryption or passwords as defense tools.

Confusing load balancers with firewalls.

Firewalls filter unwanted traffic, and load balancers distribute traffic to prevent overload during DoS attacks.

5fill in blank

hard

Fill all three blanks to complete the description of a botnet used in DDoS attacks.

Cybersecurity

A botnet is a network of [1] devices controlled by an attacker to send [2] traffic and cause [3] to the target.

Drag options to blanks, or click blank then click option'

Ainfected

Blarge

Cdisruption

Dsecured

Attempts:

3 left

💡 Hint

Common Mistakes

Thinking botnets use secured devices.

Confusing the size of traffic or the effect caused.

Botnets use infected devices to send large amounts of traffic, causing disruption to the target service.

Practice

1. What is the main goal of a Denial of Service (DoS) attack?

easy

A. To install software updates

B. To steal user passwords

C. To make a service unavailable by overwhelming it

D. To improve website speed

Solution

1. Step 1: Understand the definition of DoS

   A Denial of Service attack aims to stop users from accessing a service by overwhelming it with traffic or requests.

2. Step 2: Compare options with the definition

   Only To make a service unavailable by overwhelming it matches this goal. Other options describe unrelated actions.

3. Final Answer:

   To make a service unavailable by overwhelming it -> Option C

4. Quick Check:

   DoS = Overwhelm service [OK]

Hint: DoS means stopping access by overload [OK]

Common Mistakes:

• Confusing DoS with stealing data
• Thinking DoS improves service
• Mixing DoS with software updates

2. Which of the following best describes a Distributed Denial of Service (DDoS) attack?

easy

A. An attack from a single computer targeting a service

B. An attack using many computers to overwhelm a service

C. A method to speed up network traffic

D. A way to encrypt data for security

Solution

1. Step 1: Define DDoS attack

   DDoS attacks use many computers working together to flood a service with traffic, making it unavailable.

2. Step 2: Match options to definition

   An attack using many computers to overwhelm a service correctly describes this. An attack from a single computer targeting a service describes a single source attack (DoS), others are unrelated.

3. Final Answer:

   An attack using many computers to overwhelm a service -> Option B

4. Quick Check:

   DDoS = Many computers attack [OK]

Hint: DDoS means many computers attack together [OK]

Common Mistakes:

• Confusing DDoS with single computer attacks
• Thinking DDoS speeds up networks
• Mixing DDoS with encryption

3. Consider this scenario: A website receives a sudden flood of traffic from thousands of different IP addresses, causing it to crash. What type of attack is this?

medium

A. Distributed Denial of Service (DDoS) attack

B. Phishing attack

C. Malware infection

D. SQL Injection

Solution

1. Step 1: Analyze the traffic source

   The traffic comes from thousands of different IP addresses, indicating multiple sources.

2. Step 2: Identify attack type by symptoms

   Multiple sources flooding a website causing crash matches a DDoS attack, not phishing, malware, or SQL injection.

3. Final Answer:

   Distributed Denial of Service (DDoS) attack -> Option A

4. Quick Check:

   Many IPs flooding = DDoS [OK]

Hint: Many IPs flooding = DDoS attack [OK]

Common Mistakes:

• Confusing DDoS with phishing
• Thinking malware causes traffic flood
• Mixing SQL injection with traffic overload

4. A network administrator notices that a server is slow and unresponsive. They suspect a DoS attack. Which of the following is the best first step to confirm this?

medium

A. Change the server's IP address

B. Restart the server immediately

C. Update the server software

D. Check server logs for unusually high traffic

Solution

1. Step 1: Identify symptoms of DoS

   Slow and unresponsive server can be caused by high traffic from a DoS attack.

2. Step 2: Confirm by checking logs

   Checking server logs for unusually high traffic helps confirm if a DoS attack is happening before taking action.

3. Final Answer:

   Check server logs for unusually high traffic -> Option D

4. Quick Check:

   High traffic logs = Confirm DoS [OK]

Hint: Check logs first to confirm DoS attack [OK]

Common Mistakes:

• Restarting server without diagnosis
• Changing IP without evidence
• Updating software before confirming attack

5. Which of the following is the most effective way to protect a website from a Distributed Denial of Service (DDoS) attack?

hard

A. Use a firewall and traffic filtering services

B. Disable all website features

C. Change the website's domain name frequently

D. Only allow access from one IP address

Solution

1. Step 1: Understand DDoS protection methods

   Firewalls and traffic filtering services can detect and block malicious traffic from many sources.

2. Step 2: Evaluate options for practicality

   Disabling features or changing domain names does not stop attacks. Allowing one IP is impractical for public sites.

3. Final Answer:

   Use a firewall and traffic filtering services -> Option A

4. Quick Check:

   Firewall + filtering = Best DDoS defense [OK]

Hint: Firewalls and filters block bad traffic [OK]

Common Mistakes:

• Thinking disabling features stops attacks
• Believing domain changes prevent DDoS
• Restricting access too narrowly for public sites