ExamGecko
Question list
Search
Search

Question 125 - 156-215.81 discussion

Report
Export

Which statement is TRUE of anti-spoofing?

A.
Anti-spoofing is not needed when IPS software blade is enabled
Answers
A.
Anti-spoofing is not needed when IPS software blade is enabled
B.
It is more secure to create anti-spoofing groups manually
Answers
B.
It is more secure to create anti-spoofing groups manually
C.
It is BEST Practice to have anti-spoofing groups in sync with the routing table
Answers
C.
It is BEST Practice to have anti-spoofing groups in sync with the routing table
D.
With dynamic routing enabled, anti-spoofing groups are updated automatically whenever there is a routing change
Answers
D.
With dynamic routing enabled, anti-spoofing groups are updated automatically whenever there is a routing change
Suggested answer: C

Explanation:

The statement that is TRUE of anti-spoofing is that it is BEST Practice to have anti-spoofing groups in sync with the routing table. Anti-spoofing prevents attackers from sending packets with a false source IP address. Anti-spoofing groups define which IP addresses are expected on each interface of the Security Gateway.If the routing table changes, the anti-spoofing groups should be updated accordingly34.

Reference:Check Point R81 ClusterXL Administration Guide,Network Defined by Routes: Anti-Spoofing

asked 16/09/2024
Carlos Castro
29 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first