A systems administrator notices that a testing system is down. While investigating, the systems administrator finds that the servers are online and accessible from any device on the server network. The administrator reviews the following information from the monitoring system: Which of the following is the most likely cause of the outage?
Choose an answer
Tap an option to check your answer.
Correct answer: Denial of service.
Why this is the answer
The monitoring system shows a significant increase in network traffic to the testing system, specifically a 1000% spike in inbound packets and a 0% change in outbound packets. This pattern is characteristic of a Denial of Service (DoS) attack, where an attacker floods a system with traffic to overwhelm its resources and make it unavailable to legitimate users. The servers being online and accessible from the server network suggests the issue is external congestion rather than an internal system failure. ARP poisoning manipulates MAC-to-IP address mappings, but wouldn't typically manifest as a massive inbound packet spike with no outbound change. Jamming refers to radio frequency interference, which is irrelevant for a wired server network. Kerberoasting is an attack against Kerberos authentication tickets to crack passwords offline, not a network availability issue.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed