A network administrator is concerned about a particular server that is attacked occasionally from hosts on the Internet. The server is not critical; however, the attacks impact the rest of the network. While the company's current ISP is cost effective, the ISP is slow to respond to reported issues. The administrator needs to be able to mitigate the effects of an attack immediately without opening a trouble ticket with the ISP. The ISP is willing to accept a very small network route advertised with a particular BGP community string. Which of the following is the BESRT way for the administrator to mitigate the effects of these attacks?
A) Use the route protection offered by the ISP to accept only BGP routes from trusted hosts on the Internet, which will discard traffic from attacking hosts.
B) Work with the ISP and subscribe to an IPS filter that can recognize the attack patterns of the attacking hosts, and block those hosts at the local IPS device.
C) Advertise a /32 route to the ISP to initiate a remotely triggered black hole, which will discard traffic destined to the problem server at the upstream provider.
D) Add a redundant connection to a second local ISP, so a redundant connection is available for use if the server is being attacked on one connection.
Correct Answer:
Verified
Q140: A security engineer is assisting a developer
Q141: A security engineer successfully exploits an application
Q142: Joe, a penetration tester, is assessing the
Q143: A networking administrator was recently promoted to
Q144: A security administrator is advocating for enforcement
Q146: A government contractor was the victim of
Q147: A regional business is expecting a severe
Q148: A project manager is working with system
Q149: A security administrator is hardening a TrustedSolaris
Q150: A Chief Information Security Officer (CISO) is
Unlock this Answer For Free Now!
View this answer and more for free by performing one of the following actions
Scan the QR code to install the App and get 2 free unlocks
Unlock quizzes for free by uploading documents