Which two statements accurately describe how DoS Protection Profiles and Policies mitigate attacks? (Choose two.)

Question

Options

• AThey mitigate against volumetric attacks by leveraging known vulnerabilities, brute force methods, amplification, spoofing, and other vulnerabilities.
• BThey mitigate against attacks on a zone basis by providing reconnaissance protection against TCP/ UDP port scans and host sweeps.
• CThey mitigate against attacks by providing resource protection by limiting the number of sessions that can be used.
• DThey mitigate against attacks by utilizing "random early drop".

• A
  3% (1)
• B
  3% (1)
• C
  95% (36)

Explanation

Explanation/Reference: In addition to flood protection, we also offer resources protection. This type of protection enforces a quota for your hosts. It restricts the maximum number of sessions allowed for a particular source IP address, destination IP address or IP source-destination pair. Zone protection policies allow the use of flood protection and have the ability to protect against port scanning\sweeps and packet based attacks. A few examples are IP spoofing, fragments, overlapping segments, reject tcp-non-syn.

No community discussion yet for this question.