Which attack is mitigated by using Bounce Verification?

The correct answer is B. denial of service. Bounce Verification (also known as BATV - Bounce Address Tag Validation) mitigates denial-of-service (B) attacks caused by backscatter. Attackers send spam using a victim's email address as the forged envelope sender. When those messages bounce (non-delivery reports), the flood…

Cisco ESA Bounce Profiles and Delivery

Question

Options

Aspoof
Bdenial of service
Ceavesdropping
Dsmurf

How the community answered

(46 responses)

A
2% (1)
B
91% (42)
C
4% (2)
D
2% (1)

Explanation

Bounce Verification (also known as BATV - Bounce Address Tag Validation) mitigates denial-of-service (B) attacks caused by backscatter. Attackers send spam using a victim's email address as the forged envelope sender. When those messages bounce (non-delivery reports), the flood of bounce messages is directed at the innocent victim's mail server, overwhelming it. Bounce Verification works by tagging all legitimate outbound messages with a cryptographic token; when a bounce arrives, the ESA checks for this tag and rejects bounces for messages it never sent, stopping the flood.

Topics

#Bounce Verification#Denial of Service#Email Security#Cisco ESA

Community Discussion

No community discussion yet for this question.

Full 300-720 Practice