Question

Name three kinds of attacks that Azure DDoS protection is capable of mitigating?

1) TCP SYN flood attacks
2) UDP reflection attacks
3) HTTP GET flood attacks
4) DNS amplification attacks

Answer 1

Azure DDoS protection defends against several types of DDoS attacks including TCP SYN flood attacks, UDP reflection attacks, HTTP GET flood attacks, and is also capable of mitigating DNS amplification attacks.

Step-by-step explanation:

Azure DDoS (Distributed Denial of Service) protection is designed to shield applications from various types of DDoS attacks.

Three kinds of attacks that Azure DDoS protection can mitigate include:

• TCP SYN flood attacks - where the attacker sends a succession of SYN requests to a target's system in an attempt to consume enough server resources to make the system unresponsive to legitimate traffic.
• UDP reflection attacks - where the attacker exploits a third-party server to send UDP packets to a victim by spoofing the IP address of the victim, leading to overwhelming network traffic.
• HTTP GET flood attacks - where an attacker exploits seemingly legitimate HTTP GET requests to overwhelm a web server or application.

While not part of the listed options, Azure DDoS protection can also mitigate DNS amplification attacks - a type of reflection DDoS attack that exploits the public-domain name system.