nerdexam
EC-Council

EC0-350 · Question #761

You are the security administrator for a large network. You want to prevent attackers from running any sort of traceroute into your DMZ and discover the internal structure of publicly accessible…

The correct answer is D. There is no way to completely block doing a trace route into this area. See the full explanation below for the reasoning.

Question

You are the security administrator for a large network. You want to prevent attackers from running any sort of traceroute into your DMZ and discover the internal structure of publicly accessible areas of the network. How can you achieve this?

Options

  • ABlock ICMP at the firewall.
  • BBlock UDP at the firewall.
  • CBoth A and B.
  • DThere is no way to completely block doing a trace route into this area.

How the community answered

(22 responses)
  • A
    9% (2)
  • B
    5% (1)
  • C
    5% (1)
  • D
    82% (18)

Community Discussion

No community discussion yet for this question.

Full EC0-350 Practice