350-501 · Question #437
Which action occurs during the traceback phase of the six-phase approach to service provider security?
The correct answer is A. Trace the attack that flows from the attacked sections of the network toward the network edges. Assuming you have identified the attack vector in the preceding phase, you now need to identify the ingress points in order to mitigate the attack efficiently. The traceback phase entails tracing the attack flows from the attacked sections of the network toward the network edges.
Question
Which action occurs during the traceback phase of the six-phase approach to service provider security?
Options
- ATrace the attack that flows from the attacked sections of the network toward the network edges
- BDetect unusual activity or behavior and activate appropriate measures after an alert is raised
- CReview the whole attack-handling process
- DMitigate the attack that flows using various mechanisms
How the community answered
(30 responses)- A90% (27)
- B7% (2)
- C3% (1)
Explanation
Assuming you have identified the attack vector in the preceding phase, you now need to identify the ingress points in order to mitigate the attack efficiently. The traceback phase entails tracing the attack flows from the attacked sections of the network toward the network edges. You can take a hop-by-hop approach tracking the sources upstream from the victim toward network edges, or you can directly jump on the network ingress points to check them for the presence of attack flows. You can track flows through the network in various ways: through ACLs (with or without the log-input clause), by deploying NetFlow, or by using backscatter mechanisms.
Topics
Community Discussion
No community discussion yet for this question.