GCIA · Question #49
Adam works as a Network Administrator for passguide Inc. He wants to prevent the network from DOS attacks. Which of the following is most useful against DOS attacks?
The correct answer is C. SPI. Stateful Packet Inspection (SPI) is the most effective listed defense against DoS attacks because it tracks connection state and can detect and drop malformed or flood-based traffic before it overwhelms the network.
Question
Adam works as a Network Administrator for passguide Inc. He wants to prevent the network from DOS attacks. Which of the following is most useful against DOS attacks?
Options
- AInternet bot
- BHoney Pot
- CSPI
- DDistributive firewall
How the community answered
(35 responses)- A9% (3)
- B3% (1)
- C77% (27)
- D11% (4)
Why each option
Stateful Packet Inspection (SPI) is the most effective listed defense against DoS attacks because it tracks connection state and can detect and drop malformed or flood-based traffic before it overwhelms the network.
An internet bot is an automated software agent used to perform tasks online, not a defensive security mechanism against DoS attacks.
A honeypot lures attackers to a decoy system for analysis and intelligence gathering, but it does not block or mitigate DoS traffic targeting production systems.
SPI is a firewall technology that maintains a state table of active connections and inspects each packet against that table. Because it can identify traffic that does not match a legitimate connection state, it is able to detect and discard the anomalous flood packets characteristic of DoS attacks before they consume network resources.
A distributed firewall extends policy enforcement to multiple points in a network but is not specifically designed with DoS mitigation as its primary function, making SPI the more targeted and correct choice.
Concept tested: Stateful Packet Inspection for DoS mitigation
Source: https://www.cisco.com/c/en/us/products/security/firewalls/what-is-a-firewall.html
Topics
Community Discussion
No community discussion yet for this question.