Certified Incident Handler (CIH) Practice Ecam

Which factor can help in increasing a network's resilience against DoS attacks?

1. Reducing network bandwidth

2. Implementing load balancing

3. Turning off network monitoring

4. Limiting user access

The correct answer is: Implementing load balancing

Implementing load balancing is a crucial strategy for enhancing a network's resilience against Denial of Service (DoS) attacks. Load balancing distributes incoming traffic across multiple servers or resources, which helps ensure that no single server becomes overwhelmed by a flood of requests. This distribution is vital during a DoS attack, where the goal is often to exhaust the resources of a target system or network. By spreading the load, the network can maintain functionality and performance even under attack, allowing legitimate traffic to continue to be processed while mitigating the impact of malicious traffic. In contrast, the other choices would not contribute positively to network resilience against such attacks. Reducing network bandwidth can make a network more vulnerable because there is less capacity to handle traffic spikes, whether legitimate or malicious. Turning off network monitoring removes critical oversight that can detect and respond to unusual activities indicative of an attack, leaving the network exposed. Limiting user access can help with security, but it does not inherently provide protection against DoS attacks, which are designed to flood the network or server with excessive requests rather than exploit user access controls.