CEH Practice Question: Malware, Social Engineering and Network Attacks
Which THREE of the following are effective DDoS mitigation techniques? (Select 3)
⚠ Common exam trap
EC-CEH often tests the misconception that blackholing (null routing) is a viable mitigation technique, but candidates must remember it is a sacrificial measure that drops all traffic, not a selective defense, and is only used when the attack overwhelms all other defenses.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Rate limiting
Rate limiting is effective because it restricts the number of requests a server will accept from a single IP address or session within a given time window, typically enforced via token bucket or leaky bucket algorithms. This prevents a single attacker or botnet node from overwhelming server resources, though it must be carefully tuned to avoid blocking legitimate users.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Rate limiting
Why this is correct
Correct. Rate limiting can throttle attack traffic.
- ✓
Scrubbing centers
Why this is correct
Correct. Scrubbing centers filter attack traffic.
- ✗
Blackholing all traffic to the target
Why it's wrong here
Blackholing drops all traffic, causing denial of service.
- ✗
IP spoofing
Why it's wrong here
IP spoofing is an attack technique, not a mitigation.
- ✓
Anycast network distribution
Why this is correct
Correct. Anycast helps absorb DDoS traffic.
Go deeper
Related to this question
About these practice questions
This CEH question is part of Courseiva's 870-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CEH practice question is part of Courseiva's free EC-Council certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CEH exam.