352-001 · Question #96
You have discovered packets you think are part of an attack. What benefit would you gain from redirecting them through a packet scrubbing device?
The correct answer is A. Packet scrubbing forwards valid traffic. A packet scrubbing device redirects suspected attack traffic to a cleaning center, drops malicious packets, and forwards only legitimate traffic - its core benefit is that valid traffic still reaches the destination.
Question
You have discovered packets you think are part of an attack. What benefit would you gain from redirecting them through a packet scrubbing device?
Options
- APacket scrubbing forwards valid traffic.
- BPacket scrubbing is "line rate."
- CPacket scrubbing filters all traffic.
- DPacket scrubbing provides better logging of suspected attacks.
How the community answered
(53 responses)- A92% (49)
- B2% (1)
- C4% (2)
- D2% (1)
Why each option
A packet scrubbing device redirects suspected attack traffic to a cleaning center, drops malicious packets, and forwards only legitimate traffic - its core benefit is that valid traffic still reaches the destination.
Packet scrubbing (traffic scrubbing or DDoS mitigation) diverts suspicious flows to a scrubbing center where attack packets are identified and discarded, then re-injects clean traffic toward the intended destination - ensuring that legitimate users maintain connectivity during an active attack.
Packet scrubbing is not guaranteed to operate at full line rate because the deep-inspection and filtering processes introduce latency and processing overhead that may fall short of interface speed.
Packet scrubbing does not filter all traffic indiscriminately - it selectively drops attack traffic while passing valid traffic, so describing it as filtering all traffic is inaccurate.
While logging may occur as a secondary function, improved logging is not the primary benefit of a scrubbing device - its defining purpose is removing attack traffic while preserving valid traffic flow.
Concept tested: Packet scrubbing benefit in DDoS attack mitigation
Source: https://www.cisco.com/c/en/us/products/security/what-is-ddos.html
Topics
Community Discussion
No community discussion yet for this question.