Case Studies in Cybersecurity Response Planningintermediate
In the 2016 Dyn case described in the material, what was the immediate service-level effect of the attack?
Answer
Major websites and online services became unreachable
Explanation
### Why this is right
The Dyn attack overwhelmed a Domain Name System provider with distributed traffic, disrupting name resolution and making many websites and online services unreachable for several hours.
### The concept
A Domain Name System service helps translate names people use into network addresses. When a major provider is disrupted, services that depend on it may become difficult to reach even if their own servers are functioning. The incident illustrates how a denial-of-service attack against an infrastructure provider can affect many downstream organizations.
### The other options
- **B. Classified documents were leaked by an employee**: This describes the Snowden insider case.
- **C. Retail payment cards were harvested by point-of-sale malware**: This describes the Target breach pattern.
- **D. Industrial centrifuges were physically damaged**: This describes the physical impact associated with Stuxnet.
### Terms
- **Domain Name System (DNS)**: A naming service that maps domain names to network addresses.
- **Distributed denial-of-service (DDoS)**: An attack that uses multiple sources to overwhelm a target service.
### Remember
Infrastructure attacks can disrupt many services that depend on the targeted provider.
Related Questions
- Which plan component most directly tells responders who may approve an external breach notification?(intermediate)
- Which activity most clearly belongs to a Security Operations Center (SOC) rather than being the primary responsibility of a Computer Security Incident Response Team (CSIRT)?(basic)
- Which tool is most directly associated in the course material with collecting and correlating logs for continuous security monitoring?(intermediate)
- Which statement best distinguishes a worm from a virus?(basic)
- A server records a successful login by an authorized employee during normal working hours. Based on the course distinction, what is this most clearly?(basic)
Want to practice more questions like this?
Join myBenkio free and practice past questions for your Nigerian university courses with AI explanations for every answer.
Start Practicing Free