Certified Incident Handler (CIH) Practice Ecam

Which practice helps incident responders eradicate DoS/DDoS attacks on the web application?

1. Configure the web application to block all the inbound packets transmitted through the service ports

2. Utilize a content delivery network

3. Increase bandwidth limits

4. Enable all incoming traffic to reduce latency

The correct answer is: Configure the web application to block all the inbound packets transmitted through the service ports

The practice of utilizing a content delivery network (CDN) is instrumental in effectively mitigating DoS (Denial of Service) and DDoS (Distributed Denial of Service) attacks on web applications. This approach distributes web traffic across multiple servers located in various geographical regions. By spreading the load and utilizing redundant systems, a CDN can absorb excessive traffic generated during an attack, thus maintaining the availability and performance of the web application. While blocking all inbound packets to the service ports might seem like a direct defensive measure, it is not practical or effective for handling DDoS attacks. Such a configuration could inadvertently block legitimate traffic, resulting in service disruptions for real users. Increasing bandwidth might provide temporary relief but does not address the underlying issue of overwhelming traffic during an attack. Enabling all incoming traffic to reduce latency could lead to an even greater vulnerability, allowing more attack traffic to reach the application. In summary, implementing a content delivery network helps distribute traffic, manage spikes effectively, and increase the resilience of a web application against DoS/DDoS threats, making it the appropriate choice for incident responders in this context.