Test Index

Comp TIA Security + Certification Exam Questions Part 3

Question : 44

Total: 60

A security analyst is reviewing the following packet capture of an attack directed at a company's server located in the DMZ:

10:55:24.126586 IP 192.168.1.10.5000 > 172.31.67.4.21:Flags[S] 
 10:55:24.126596 IP 192.168.1.10.5001 > 172.31.67.4.22:Flags[S] 
 10:55:24.126601 IP 192.168.1.10.5002 > 172.31.67.4.25:Flags[S]  
 10:55:24.126608 IP 192.168.1.10.5003 > 172.31.67.4.37:Flags[S]

Which of the following ACLs provides the BEST protection against the above attack and any further attacks from the same IP, while minimizing service interruption?

DENY TCO From ANY to 172.31.64.4
Deny UDP from 192.168.1.0/24 to 172.31.67.0/24
Deny IP from 192.168.1.10/32 to 0.0.0.0/0
Deny TCP from 192.168.1.10 to 172.31.67.4

Validate

Go to Question:

Prev Question

Next Question

More Free Exams:

Certified Information Systems Security Professional (CISSP)
CISCO Certification Exams