nerdexam
CompTIA

N10-005 · Question #363

An administrator determines that an attack is taking place on the email server from a group of users on the same ISP. Which of the following is the BEST way to mitigate an attack on the network?

The correct answer is A. Packet filtering. Packet filtering at the firewall or router can block traffic based on source IP addresses or IP ranges, effectively stopping an ongoing attack from a group of users at the same ISP.

Network security

Question

An administrator determines that an attack is taking place on the email server from a group of users on the same ISP. Which of the following is the BEST way to mitigate an attack on the network?

Options

  • APacket filtering
  • BSpam filtering
  • CMAC filtering
  • DCSU

How the community answered

(38 responses)
  • A
    76% (29)
  • B
    13% (5)
  • C
    8% (3)
  • D
    3% (1)

Why each option

Packet filtering at the firewall or router can block traffic based on source IP addresses or IP ranges, effectively stopping an ongoing attack from a group of users at the same ISP.

APacket filteringCorrect

Packet filtering is a firewall technique that inspects packet headers (source/destination IP, port, protocol) and allows or denies traffic based on defined ACL rules. Since the attackers share the same ISP, their traffic originates from a common IP range, making IP-based packet filtering an effective way to block all attack traffic at the network perimeter without affecting other users.

BSpam filtering

Spam filtering inspects email message content and headers to block unwanted messages, but it does not block malicious network-level traffic or active attacks at the packet level.

CMAC filtering

MAC filtering works only at Layer 2 on the local network segment; MAC addresses are not preserved across routed Internet connections, making it ineffective against remote attackers.

DCSU

A CSU (Channel Service Unit) is a hardware device for WAN line conditioning and has no capability to inspect or filter traffic based on attack patterns.

Concept tested: Packet filtering to mitigate IP-based network attacks

Source: https://learn.microsoft.com/en-us/windows-server/networking/technologies/nps/nps-firewalls-configure

Topics

#packet filtering#attack mitigation#firewall rules#network security

Community Discussion

No community discussion yet for this question.

Full N10-005 Practice