nerdexam
GIAC

GCIA · Question #49

Adam works as a Network Administrator for passguide Inc. He wants to prevent the network from DOS attacks. Which of the following is most useful against DOS attacks?

The correct answer is C. SPI. Stateful Packet Inspection (SPI) is the most effective listed defense against DoS attacks because it tracks connection state and can detect and drop malformed or flood-based traffic before it overwhelms the network.

Network Traffic Analysis & Protocol Review

Question

Adam works as a Network Administrator for passguide Inc. He wants to prevent the network from DOS attacks. Which of the following is most useful against DOS attacks?

Options

  • AInternet bot
  • BHoney Pot
  • CSPI
  • DDistributive firewall

How the community answered

(35 responses)
  • A
    9% (3)
  • B
    3% (1)
  • C
    77% (27)
  • D
    11% (4)

Why each option

Stateful Packet Inspection (SPI) is the most effective listed defense against DoS attacks because it tracks connection state and can detect and drop malformed or flood-based traffic before it overwhelms the network.

AInternet bot

An internet bot is an automated software agent used to perform tasks online, not a defensive security mechanism against DoS attacks.

BHoney Pot

A honeypot lures attackers to a decoy system for analysis and intelligence gathering, but it does not block or mitigate DoS traffic targeting production systems.

CSPICorrect

SPI is a firewall technology that maintains a state table of active connections and inspects each packet against that table. Because it can identify traffic that does not match a legitimate connection state, it is able to detect and discard the anomalous flood packets characteristic of DoS attacks before they consume network resources.

DDistributive firewall

A distributed firewall extends policy enforcement to multiple points in a network but is not specifically designed with DoS mitigation as its primary function, making SPI the more targeted and correct choice.

Concept tested: Stateful Packet Inspection for DoS mitigation

Source: https://www.cisco.com/c/en/us/products/security/firewalls/what-is-a-firewall.html

Topics

#DoS defense#stateful packet inspection#SPI#firewall countermeasures

Community Discussion

No community discussion yet for this question.

Full GCIA Practice