Study. uk . com
  1. Home
  2. All questions
  3. Question 480

CompTIA Security+ study material · question 480 of 611

Why does blocking by source address fail against a distributed denial-of-service attack?

  1. Traffic arrives from many sources, so the block list cannot keep up
  2. Source addresses are always encrypted
  3. Firewalls cannot filter by source address
  4. The attack targets the application layer only
Show the answer

Answer: A. Traffic arrives from many sources, so the block list cannot keep up

Distribution is the point of the attack, which shifts the defence to upstream capacity and scrubbing.

Challenge yourself on this topic → Study as cards