ISC2 CC Network Security Practice Question
A company is experiencing a distributed denial-of-service (DDoS) attack that is overwhelming the network bandwidth. Which THREE mitigation techniques are most effective?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Enable rate limiting on network devices
Traffic filtering, rate limiting, and using a CDN can help absorb DDoS traffic. Changing IP addresses is reactive and not a standard mitigation; disabling ICMP may help against some attacks but is not a primary mitigation.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Enable rate limiting on network devices
Why this is correct
Rate limiting restricts the amount of traffic from a source.
- ✗
Disable ICMP on all devices
Why it's wrong here
Disabling ICMP may help against ICMP floods but not all DDoS.
- ✗
Change the public IP address of the server
Why it's wrong here
Changing IP is not a scalable mitigation.
- ✓
Use a content delivery network (CDN) to absorb traffic
Why this is correct
CDNs distribute traffic and can absorb DDoS volume.
- ✓
Implement traffic filtering at the perimeter
Why this is correct
Filtering blocks malicious traffic based on patterns.
Visual reference
Go deeper
Related to this question
Learn chapter
Network Security Foundations
Key term
ICMP
ICMP is a network-layer protocol used by network devices to send error messages and operational information about network connectivity.
Key term
DDoS
A DDoS (Distributed Denial-of-Service) attack is a malicious attempt to disrupt normal traffic of a targeted server, service, or network by overwhelming it with a flood of internet traffic from multiple compromised systems.
About these practice questions
One of 976 original CC practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CC practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CC exam.