Network Attacks and Mitigation Strategies Questions

Cover identification and practical mitigation of common network attack vectors and trade offs in defensive design. Candidates should be able to describe distributed denial of service attacks at the volumetric, protocol and application layers, address spoofing and session hijacking, man in the middle attacks and eavesdropping, cache poisoning and route hijacking. Assessment should include network level mitigations such as ingress and egress filtering, anti spoofing measures, rate limiting and congestion controls, blackholing and traffic scrubbing with upstream providers, border filtering and anomaly detection using flow telemetry, and application level protections such as web application firewalls and authentication. Candidates should also discuss detection and monitoring, incident response steps, forensic data collection with flow and packet captures, and architectural strategies like segmentation and least privilege to limit blast radius.