单项选择题

How doTCP SYN attacks take advantage ofTCPto prevent new connections from being established to a host under attack？（）

A.These attacks send multiple FIN segments forcing TCP connection release.
B.These attacks fill up a hosts’ listen queue by failing to ACK partially openedTCPconnections.
C.These attacks take advantage of the hosts transmit backoff algorithm by sending jam signals to the host.
D.These attacks increment the ISN of each segment by a random number causing constant TCP retransmissions.
E.These attacks send TCP RST segments in response toconnection SYN+ACK segments forcing SYN retransmissions.

<没有了目录下一题>

热门试题

单项选择题WhenconfiguringsystemstateconditionswiththeCiscoSecurityAgent，whatistheresultingactionwhen configuringmorethanonesystemstatecondition？（）

A.Any matching state condition will result with the state being triggered
B. Once a state condition ismet， the system ceases searching further conditions and will cause the state condition to trigger
C. All specified state conditions are used as part of the requirements tobe met to for the state to trigger
D. Once the state conditions are met， they become persistent and can only be removed using the Reset feature

单项选择题CS-MARSworkswith whichIOSfeaturetoaccomplishanomalydetection？（）

A. IOS IPS
B. Autosecure
C. CSA
D. Netflow
E. IOS Network Foundation Protection （NFP）
F. IOS Firewall

单项选择题WhenimplementinginternetstandardsyouarerequiredtofollowRFC’sprocessesandproceduresbasedonwhatRFC？（）

A. RFC 1769 and mere publications
B. Real standards of RFC 1918
C. RFC 1669 real standards andmere publications
D. Real standards and mere publications RFC 1796
E. None of the above

单项选择题WhenimplementingbestpracticesforIPSourceAddressSpoofingandDefeatingDenialofServiceAttackswithIPSourceAddressSpoofing，whatRFCiscommonlyusedtoprotectyournetwork？（）

A. RFC 1149
B. RFC 3704
C. RFC 1918
D. RFC 2827

单项选择题SinceHTTPisoneofthemostcommonprotocolsusedintheinternet，whatshouldbedoneatafirewallleveltoensurethattheprotocolisbeingused correctly？（）

A. Ensure that a stateful firewall allows only HTTP traffic destined for valid web server IP addresses.
B. Ensure that a firewall has SYN flood and DDoS protection applied specifically for valid web servers.
C. Ensure that your firewall enforces HTTP protocol compliance to ensure that only valid flows are allowed inand outof your network.
D. Ensure that HTTP is always authenticated.
E. Ensure that your web server is in a different zone than your backend servers such as SQL and DNS.