Mile2_Security
MK0-201 · Question #65
Which of the following might be used to give false positives when a UDP scan is being performed against a DMZ server running DNS? Choose the best answer.
The correct answer is D. On the firewall, block all ICMP Port Unreachable messages. See the full explanation below for the reasoning.
Question
Which of the following might be used to give false positives when a UDP scan is being performed against a DMZ server running DNS? Choose the best answer.
Options
- AOn the firewall, block ICMP TTL Exceeded
- BOn the firewall, block all incoming UDP
- COn the firewall, block all TCP SYN packets
- DOn the firewall, block all ICMP Port Unreachable messages
How the community answered
(27 responses)- A7% (2)
- B4% (1)
- C15% (4)
- D74% (20)
Community Discussion
No community discussion yet for this question.