What is the value of a DoS attack as part of a security assessment? this is the question asked to me in EC council's exam preparation, so need to know. not intending any attack
To test the resilience of the network and systems:
To predict the outcome of such attack and prepare mitigation plans in case of emergency.
In some cases such attacks can take weeks.
Basically, for resilience and protections testing. The customer want to know his security posture in a denial-of-service context.
Distributed denial-of-service is harder to test of course as it would require very specific resources (a botnet or whatever), but one can still test the existence of controls, protections and mitigations in place against such attacks.