Cisco
300-440 · Question #60
Refer to the exhibit. The policy has failed to stop DOS attacks from within the service VPN 100. The counter shows no logб but the destination network reported DOS attacks from network 10.10.0.0/16. T
Sign in or unlock 300-440 to reveal the answer and full explanation for question #60. The question stem and answer options stay visible for context.
Operation
Question
Refer to the exhibit. The policy has failed to stop DOS attacks from within the service VPN 100. The counter shows no logб but the destination network reported DOS attacks from network 10.10.0.0/16. The engineer identified a misconfigured policy. Which setting is the source of the issue?
Exhibit
Options
- A"Echo-reply" must be matched instead of icmp-msg in protocol 1.
- BThe policy direction must run from-tunnel rather than from-service.
- CProtocol 1 must be completely blocked with all its options.
- D"Echo" must be matched rather than icmp-msg in protocol 1.
Unlock 300-440 to see the answer
You've previewed enough free 300-440 questions. Unlock 300-440 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#SD-WAN data policy#DoS prevention#service VPN#policy direction