Preventing DoS Attacks - Best Practices for Network Security

Implementing DoS Attack Prevention Measures

Prev Question Next Question

Question

A bank is experiencing a DoS attack against an application designed to handle 500 IP-based sessions.

in addition, the perimeter router can only handle 1Gbps of traffic.

Which of the following should be implemented to prevent a DoS attacks in the future?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D.

D.

The best option to prevent DoS attacks in the future would be to deploy multiple web servers and implement a load balancer. This approach would distribute the traffic among the multiple servers, preventing any one server from being overloaded and becoming a bottleneck for the application.

Increasing the capacity of the perimeter router to 10 Gbps might help in the short term, but it would not prevent the underlying issue of a single application becoming overwhelmed by traffic.

Installing a firewall at the network would not prevent DoS attacks, as these attacks are designed to overwhelm a target with traffic, which a firewall is not designed to handle.

Using redundancy across all network devices and services is a good practice for high availability and fault tolerance, but it would not prevent a DoS attack from overwhelming a single application or device.

Therefore, the best option to prevent DoS attacks against an application designed to handle 500 IP-based sessions is to deploy multiple web servers and implement a load balancer.