A firewall administrator notices that many Host Sweep scan attacks are being allowed through the firewall sourced from the outside zone. What should the firewall administrator do to mitigate this type of attack?

Question

Maurice Nicholson · Accepted Answer

Create a Zone Protection profile, enable reconnaissance protection, set action to Block, and apply it to the outside zone.

Maurice Nicholson · Answer

Create a DOS Protection profile with SYN Flood protection enabled and apply it to all rules allowing traffic from the outside zone

Maurice Nicholson · Answer

Enable packet buffer protection in the outside zone.

Maurice Nicholson · Answer

Create a Security rule to deny all ICMP traffic from the outside zone.

Question list

List of questions

Question 1

(0)

Question 2

(0)

Question 3

(0)

Question 4

(0)

Question 5

(0)

Question 6

(0)

Question 7

(0)

Question 8

(0)

Question 9

(0)

Question 10

(0)

Related questions

Question 117 - PCNSE discussion

Suggested answer: D

0 comments