• Description: Security Solutions for Systems Engineers
• Passing Score: 75%
• Practice Test - Number of questions: 106 questions
• Simulation Test - Number of questions: 106 questions
• Simulation Test Duration: 90 minutes
• Has explanations: No

You work as a network operator for an IT company. You have just detected a distributed DoS attack which appears to have sources from many hosts in network X/24. You must take preventive action to block all offending traffic, so you announce a BGP route, with the next-hop attribute of 172.31.1.1, for the X/24 network of the attacker. Which two methods will be adopted by the routers at the regional office, branch office, and telecommuter location to prevent traffic going to and from the attacker? (Choose two.)

Answer(s)

1. A prefix list to block routing updates about the X/24 network
2. A static route to 172.31.1.1/32, which points to a null interface
3. A dynamic ACL entry to block any traffic that is sourced from the X/24 network
4. Strict uRPF

A static route to 172.31.1.1/32, which points to a null interface

Strict uRPF