nerdexam
Cisco

352-001 · Question #123

Which IPv4 addressing and routing scheme can increase the availability of a network service during a DoS attack?

The correct answer is C. anycast. Anycast routing assigns the same IP address to multiple distributed servers, spreading DoS attack traffic across many nodes to absorb and mitigate the attack.

Designing Security

Question

Which IPv4 addressing and routing scheme can increase the availability of a network service during a DoS attack?

Options

  • Aunicast
  • Bbroadcast
  • Canycast
  • Dmulticast

How the community answered

(21 responses)
  • A
    5% (1)
  • B
    5% (1)
  • C
    81% (17)
  • D
    10% (2)

Why each option

Anycast routing assigns the same IP address to multiple distributed servers, spreading DoS attack traffic across many nodes to absorb and mitigate the attack.

Aunicast

Unicast maps one IP address to one specific host, making a single server the sole target of all DoS traffic with no inherent distribution or redundancy.

Bbroadcast

Broadcast sends packets to all hosts on a subnet and is not used for service delivery - it is not applicable to mitigating DoS attacks against a specific network service.

CanycastCorrect

Anycast allows multiple hosts to share a single IP address, and routing directs each client to the topologically nearest instance - during a DoS attack, volumetric traffic is distributed across many servers and network paths rather than overwhelming a single destination, significantly increasing service availability and resilience.

Dmulticast

Multicast delivers packets to a subscribed group of receivers but is designed for one-to-many content distribution, not for distributing inbound service requests or absorbing DoS attack traffic across server instances.

Concept tested: Anycast routing for DoS attack mitigation and availability

Source: https://datatracker.ietf.org/doc/html/rfc4786

Topics

#anycast#DoS mitigation#IPv4 addressing#service availability

Community Discussion

No community discussion yet for this question.

Full 352-001 Practice