Are you studying for the CISSP or Security+ certifications?
Skillset can help you prepare! Sign up for your free Skillset account and take the first steps towards your certification.
Skillset can help you prepare! Sign up for your free Skillset account and take the first steps towards your certification.
Which of the following is the most effective filter rule for preventing a network from being configured as an amplifier in a denial of service (DoS)? Deny all:
Incoming traffic with identifiable spoofed IP source addresses.
Incoming traffic with IP options set.
Outgoing traffic with IP source addresses external to the network.
Incoming traffic to critical hosts.
Outgoing traffic with an IP source address different than the IP range in the network is invalid. In most of the cases, it signals a DoS attack originated by an internal user or by a previously compromised internal machine; in both cases, applying this filter will stop the attack.
Train with Skillset and pass your certification exam. Faster. Guaranteed.
Study thousands of practice questions that organized by skills and ranked by difficulty.
Create a tailored training plan based on the knowledge you already possess.
Know when you’re ready for the high-stakes exam. Have the confidence that you will pass on your first attempt.