After undergoing an external IT audit, George realizes his network is vulnerable to DDoS attacks. What countermeasures could he take to prevent DDoS attacks?

The correct answer is D. Disable direct broadcasts. Disabling directed (IP) broadcasts is a key countermeasure against Smurf attacks, a classic amplification-based DDoS technique. In a Smurf attack, an attacker sends ICMP echo requests to a network's broadcast address with the victim's IP spoofed as the source - causing all hosts

Submitted by haruto_sh· Apr 18, 2026Network Forensics

Question

Options

AEnable BGP
BEnable direct broadcasts
CDisable BGP
DDisable direct broadcasts

How the community answered

(41 responses)

A
12% (5)
B
2% (1)
C
5% (2)
D
80% (33)

Explanation

Disabling directed (IP) broadcasts is a key countermeasure against Smurf attacks, a classic amplification-based DDoS technique. In a Smurf attack, an attacker sends ICMP echo requests to a network's broadcast address with the victim's IP spoofed as the source - causing all hosts on the network to flood the victim with replies. Disabling directed broadcasts on routers prevents the network from being used as an amplifier. Enabling or disabling BGP (Border Gateway Protocol) relates to inter-domain routing and is not a direct DDoS prevention control.

Topics

#DDoS prevention#Network hardening#Broadcast control#Attack countermeasures

Community Discussion

No community discussion yet for this question.

Full 312-49 Practice