Ethical Hacking Essentials Practice Test

Which of the following countermeasures helps security teams defend against DoS and DDoS attacks on the network and system?

1. Implement packet filtering

2. Prevent the use of unnecessary functions such as gets and strcpy

3. Increase bandwidth limit

4. Utilize broad network protocols

The correct answer is: Prevent the use of unnecessary functions such as gets and strcpy

The measure that effectively helps security teams defend against DoS (Denial of Service) and DDoS (Distributed Denial of Service) attacks is focused on implementing stricter controls on how data is handled within applications, particularly by preventing the use of vulnerable functions such as gets and strcpy. These functions can lead to buffer overflow vulnerabilities, which attackers may exploit to disrupt services or crash systems. By safeguarding against such vulnerabilities, security teams can reduce the attack surface that threat actors may exploit to launch DoS or DDoS attacks. Using packet filtering can help manage inbound and outbound traffic but does not specifically address the vulnerabilities that can be exploited in applications. Increasing bandwidth can provide some relief during an attack, but it does not inherently protect against the mechanisms through which DoS and DDoS happen. Utilizing broad network protocols may enhance communication across devices, but it does not provide specific measures against the attacks themselves. Therefore, focusing on securing application code through programming practices is critical to building resilience against potential DoS and DDoS attack vectors.