nerdexam
Juniper

JN0-1330 · Question #35

Click the Exhibit button. Referring to the network shown in the exhibit, a SYN flood attacks is initiated by an attacker that has a public IP address from ISP B within the 200.200.10.0/24 prefix…

The correct answer is B. ISP A should implement an ingress firewall filter on router R3 to discard traffic originating from the D. ISP B should implement an ingress firewall filter on the router R5 interface connecting to the attacker. Explanation/Reference:

Threat Management Design

Question

Click the Exhibit button. Referring to the network shown in the exhibit, a SYN flood attacks is initiated by an attacker that has a public IP address from ISP B within the 200.200.10.0/24 prefix. The attacker is sending SYN packets to the victim, connected to ISP A, with destination address of 100.100.31.78 using spoofed source addresses at random from the 192.168.0.0/16 prefix. Which two design best practices would prevent this attack from working? (Choose two.)

Exhibit

JN0-1330 question #35 exhibit

Options

  • AISP A should implement an ingress firewall filter on router R2 to discard traffic originating from the
  • BISP A should implement an ingress firewall filter on router R3 to discard traffic originating from the
  • CISP A should implement an ingress firewall filter on router R3 to discard traffic originating from the
  • DISP B should implement an ingress firewall filter on the router R5 interface connecting to the attacker

How the community answered

(39 responses)
  • A
    13% (5)
  • B
    79% (31)
  • C
    8% (3)

Explanation

Explanation/Reference:

Topics

#SYN flood#DDoS mitigation#ingress filtering#spoofed source addresses

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full JN0-1330 Practice