PrepAway - Latest Free Exam Questions & Answers

Which statement describes a denial of service attack?

Which statement describes a denial of service attack?

PrepAway - Latest Free Exam Questions & Answers

A.
Prevents authorized users from accessing the resources and services

B.
Prohibits attempts to repair the resources and services after an attack

C.
Attempts to provide false information by impersonating someone’s identity

D.
Prevents unauthorized users to access the resources and services

Explanation:
Threats
Threats are the potential attacks that can be carried out on an IT infrastructure. These attacks can
be classified as active or passive. Passive attacks are attempts to gain unauthorized access into
the system. They pose threats to confidentiality of information. Active attacks include data
modification, denial of service (DoS), and repudiation attacks. They pose threats to data integrity,
availability, and accountability.
In a data modification attack, the unauthorized user attempts to modify information for malicious
purposes. A modification attack can target the data at rest or the data in transit.
These attacks pose a threat to data integrity.
Denial of service (DoS) attacks prevent legitimate users from accessing resources and services.
These attacks generally do not involve access to or modification of information.
Instead, they pose a threat to data availability. The intentional flooding of a network or website to
prevent legitimate access to authorized users is one example of a DoS attack.
Repudiation is an attack against the accountability of information. It attempts to provide false
information by either impersonating someone’s identity or denying that an event or a transaction
has taken place. For example, a repudiation attack may involve performing an action and
eliminating any evidence that could prove the identity of the user (attacker) who performed that
action. Repudiation attacks include circumventing the logging of security events or tampering with
the security log to conceal the identity of the attacker.
EMC E10-001 Student Resource Guide. Module 14: Securing the Storage Infrastructure


Leave a Reply