(ISC)2 Certified in Cybersecurity Practice Exam

What does Denial-of-Service (DoS) prevention involve?

1. Allowing excessive access to resources

2. Preventing unauthorized access to resources

3. Blocking any incoming network traffic

4. Delaying authorized operations

The correct answer is: Preventing unauthorized access to resources

Denial-of-Service (DoS) prevention is fundamentally concerned with ensuring that legitimate users have uninterrupted access to the resources and services they are entitled to use. It primarily involves safeguarding the system from being overwhelmed by excessive requests that could lead to service interruptions, hence maintaining the availability of those resources. Preventing unauthorized access to resources is a significant aspect of DoS prevention, as it ensures that only legitimate and authorized users can utilize the services. By controlling who can access the system and how, organizations can fortify defenses against potential DoS attacks, which often involve malicious actors trying to exploit system vulnerabilities to disrupt services. The other options can lead to a misunderstanding of what effective prevention entails. For instance, allowing excessive access to resources does not take into account the potential for abuse, and blocking incoming network traffic indiscriminately could prevent legitimate access, while delaying authorized operations might not directly address the service availability issue central to DoS prevention. Thus, focusing on preventing unauthorized access is a proactive measure that enhances the resiliency of a system against DoS incidents.