Exam CS0-002 topic 1 question 226 discussion

FW rules are not valid to decrease the number of requests in a specific range of time.

SMB exploitation and remote code execution can do a lot more damage to files/network compared to a DoS causing a site to be down

A DoS attack is used to tie up a website’s resources so that users who need to access the site cannot do so, affecting availability. The SMB vulnerability is tied to a known CVE and Microsoft Advisory, citing, "Vulnerabilities in SMB Could Allow Remote Code Execution." In May 2017, the WannaCry ransomware attack targeted Windows systems by encrypting data and demanding ransom payments in the Bitcoin cryptocurrency. This was made possible by an SMB vulnerability. This could highly affect the C.I.A. of the information system or data vs. the DOS attack that could affect availability. I also took the CVE for SMB into account. My thought process is since it is a known vulnerabilty, I should make that a priority. https://learn.microsoft.com/en-us/security-updates/SecurityAdvisories/2009/975497

Deal with the active DDOS

Port 445 is the obvious problem here.

I would vote on D as DoS is the easiest way to perform and affects availability of this site

Remediate C first.