Which of the following prevention mechanisms does Huawei firewall support against HTTP Flood attacks? (Multiple choice)

Question

Options

• ABasic source detection
• BCurrent limiting
• CAdvanced Source Detection
• D302 redirect

• A
  84% (52)
• B
  16% (10)

Explanation

Huawei firewalls defend against HTTP Flood attacks using three distinct mechanisms: Basic Source Detection (A) monitors request rates per source IP and blocks sources that exceed configured thresholds; Advanced Source Detection (C) employs more sophisticated techniques such as cookie challenges or JavaScript verification to distinguish legitimate browsers from automated bots; and 302 Redirect (D) responds to suspicious clients with an HTTP 302 redirect - genuine browsers follow it automatically, while most flood bots do not, allowing the firewall to filter malicious traffic.

Current Limiting (B) is incorrect in this context because, while rate limiting is a general network concept, Huawei's HTTP Flood protection feature set categorizes its specific defense modes as source-detection-based and redirect-based mechanisms - "current limiting" alone is not one of the named HTTP Flood prevention modes in Huawei's firewall implementation.

Memory tip: Think of the three valid options as a progressively smarter filter - Basic checks how many requests come from a source, Advanced checks who is making them, and 302 Redirect tests whether the requester behaves like a real browser. "B for Basic Current Limiting" is the trap - current limiting is a concept, not a named Huawei HTTP Flood protection mode.

No community discussion yet for this question.