300-445 Question 207
Select 3Your organization is experiencing intermittent network outages and degraded application performance. After investigation, you identify the following: a large volume of irregular traffic targeting your servers, unusual redirection of DNS requests to malicious IP addresses, and discrepancies in the advertised BGP routes. Which security issues are most likely affecting your network performance?
- A
DDoS attack
- B
DNS hijacking
- C
BGP hijacking
- D
Route leaking
- E
IP address spoofing
Show answer and explanation
Correct answers: A, B, C
Explanation
The symptoms described, irregular traffic overwhelming servers, DNS redirection to malicious IPs, and discrepancies in BGP routes, are indicative of a combination of DDoS attacks, DNS hijacking, and BGP hijacking. These threats can significantly degrade network performance and security, requiring immediate identification and remediation.
- A. Correct.
DDoS attacks generate a high volume of traffic that overwhelms servers, leading to degraded application performance and intermittent outages. This matches the symptoms described.
- B. Correct.
DNS hijacking occurs when DNS queries are redirected to malicious IP addresses, as noted in the scenario. This can disrupt network performance and compromise user data.
- C. Correct.
BGP hijacking happens when incorrect BGP routes are advertised, causing traffic to be misrouted. The discrepancies in BGP routes in the scenario suggest this issue.
- D. Incorrect.
Route leaking involves unauthorized or unintended advertisement of routes, which may not directly match the described symptoms in this scenario.
- E. Incorrect.
IP address spoofing involves forging the source IP of packets, which is commonly used in attacks like DDoS but is not explicitly linked to all the observed issues in this scenario.