DoS Attack Threshold: Packet Rate vs Server Capacity

312-50v12 By islever Editorial Last updated

Denial-of-Service

Short answer

A The attacker's packet rate (2010) exceeds the server's capacity (1987), causing potential unresponsiveness as defined by the failure condition.

Question

A sophisticated attacker targets your web server with the intent to execute a Denial of Service (DoS) attack. His strategy involves a unique mixture of TCP SYN, UDP, and ICMP floods, using 'r' packets per second. Your server, reinforced with advanced security measures, can handle 'h' packets per second before it starts showing signs of strain. If 'r' surpasses 'h', it overwhelms the server, causing it to become unresponsive. In a peculiar pattern, the attacker selects 'r' as a composite number and 'h' as a prime number, making the attack detection more challenging. Considering 'r=2010' and different values for 'h', which of the following scenarios would potentially cause the server to falter?
  1. h=1987 (prime): The attacker's packet rate exceeds the server's capacity, causing potential unresponsiveness. Correct Answer
  2. h=1999 (prime): Despite the attacker's packet flood, the server can handle these requests, remaining responsive.
  3. h=1993 (prime): Despite being less than 'r', the server's prime number capacity keeps it barely operational, but the risk of falling is imminent.
  4. h=2003 (prime): The server can manage more packets than the attacker is sending, hence it stays operational.

Key Takeaways

The core concept is simple inequality: if attacker rate r > server capacity h, the server fails. The distractors introduce irrelevant mathematical properties (prime/composite numbers) to confuse the candidate.

This question tests the fundamental logic of Denial of Service (DoS) attacks by comparing attacker packet rate against server capacity. The correct answer identifies the scenario where the attack volume exceeds the system's handling limit, causing unresponsiveness.

Common mistake: Candidates often overthink the problem by analyzing the primality or composite nature of the numbers provided in the options, ignoring the basic arithmetic comparison required by the prompt.

Expert Analysis

Why the Answer Is Correct

The question establishes a clear condition for failure: 'If r surpasses h, it overwhelms the server.' With r = 2010, we simply need to find the option where h < 2010. Option A sets h = 1987. Since 2010 > 1987, the attacker's rate exceeds the capacity, leading to the described outcome of unresponsiveness. This directly satisfies the logical condition given in the text.

Why the Other Options Are Wrong

Options B, C, and D all present scenarios that contradict the failure condition or describe success incorrectly. In Option B, h=1999 (still less than 2010), but the option claims the server remains responsive, which contradicts the rule that r > h causes overwhelm. In Option C, h=1993 (< 2010), yet it implies barely operational status rather than the definitive failure described. In Option D, h=2003 (< 2010), but the option states the server manages more packets than sent, which is mathematically false (2003 is not greater than 2010). All these options fail because they either misstate the arithmetic relationship or ignore the direct consequence defined in the prompt.

Community Comment Notes

Community consensus strongly supports Option A based on straightforward arithmetic. As Nopez noted, "If 'r' surpasses 'h', it'll overwhelm. That means if 2010 surpasses 1987..." Another user, sumanroy, emphasized the simplicity: "what will overwhelm the server most? the one with less resource right?" The comments reflect that candidates quickly identified the basic inequality test without being distracted by the prime number context.

Exam Strategy

When faced with technical questions that include complex terminology (like specific packet types or mathematical properties), always look for the core logical definition first. If the question defines a simple cause-and-effect rule (e.g., A > B causes X), apply that rule directly before considering secondary details.

Frequently Asked Questions

Why are prime numbers mentioned in the question?

They are distractors. The primality of h does not affect the logical condition that r > h causes the DoS failure.

Does TCP SYN flood matter here?

No, the question provides a simplified model where only the packet count 'r' and capacity 'h' determine the outcome.

More 312-50v12 FAQ →

Community Votes

A
100%

100% of anonymous learners picked answer A. Votes are pick records left by other test-takers — they are not the verified answer.

Discussion 4 contributions

Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.

From public community threads 4

  1. Nopez 👍 2 Answered A
    A. If 'r' surpasses 'h', it'll overwhelm. That means if 2010 surpasses 1987 (it does), it'll cause problems.
  2. qwerty100 👍 1 Answered A
    A. h=1987 (prime): The attacker's packet rate exceeds the server's capacity, causing potential unresponsiveness.
  3. sumanroy 👍 1 Answered A
    Bruh it was simple enough XD, what will overwhelm the server most? the one with less resource right?
  4. 49f4430 👍 1
    common ECC all this question for telling us A> B

Reader comments & corrections

No reader corrections yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

Comprehensive Network Scanning Sequence

S-grade

NetBIOS Enumeration on IPv6 Networks

S-grade

Ethical Hacker Liability and Organizational Risk Acceptance

S-grade

Least Likely Social Engineering Method Based on Footprinting Data

S-grade

← Back to 312-50v12 Study Guide