Refer to the exhibit. An engineer must stop DDoS attacks on web and mail servers by using an ACL. Which two commands must be run on router R17? (Choose two.)

The correct answer is D. access-list 101 deny ip 10.10.10.2 0.0.0.0 10.20.10.2 0.0.0.0 E. access-list 101 deny ip 10.10.10.2 0.0.0.0 10.30.10.2 0.0.0.0. The attacker's IP is: The servers under attack are: Web Server: 10.20.10.2 Mail Server: 10.30.10.2 We must deny traffic from attacker servers. Correct ACL format uses host wildcards (0.0.0.0): deny ip 10.10.10.2 0.0.0.0 10.20.10.2 0.0.0.0 deny ip 10.10.10.2 0.0.0.0 10.30.10.2…

Service Provider Network Security

Question

Exhibit

Options

Aaccess-list 101 deny ip 10.10.10.2 255.255.255.255 10.20.10.2 255.255.255.255
Baccess-list 101 deny ip 10.0.0.0 0.255.255.255 10.10.0.2 0.0.0.0
Caccess-list 101 deny ip 10.10.10.2 255.255.255.255 10.30.10.2 255.255.255.255
Daccess-list 101 deny ip 10.10.10.2 0.0.0.0 10.20.10.2 0.0.0.0
Eaccess-list 101 deny ip 10.10.10.2 0.0.0.0 10.30.10.2 0.0.0.0

How the community answered

(28 responses)

A
7% (2)
B
4% (1)
C
14% (4)
D
75% (21)

Explanation

The attacker's IP is: The servers under attack are: Web Server: 10.20.10.2 Mail Server: 10.30.10.2 We must deny traffic from attacker servers. Correct ACL format uses host wildcards (0.0.0.0): deny ip 10.10.10.2 0.0.0.0 10.20.10.2 0.0.0.0 deny ip 10.10.10.2 0.0.0.0 10.30.10.2 0.0.0.0

Topics

#ACL#DDoS mitigation#IP access list#traffic filtering

Community Discussion

No community discussion yet for this question.

Full 300-540 Practice