A security analyst is reviewing firewall logs and sees a high volume of ICMP echo requests from a single external IP to all addresses in the internal /24 subnet. The firewall is currently allowing ICMP echo requests. What is the most appropriate Layer 3 defense to mitigate this ping sweep while still allowing necessary ICMP for troubleshooting?

Block all ICMP traffic from external sources

Disable ICMP on the internal hosts

Allow ICMP echo requests only to the web server

Rate-limit ICMP echo requests and block excessive bursts from a single source

GIAC Defensible Security Architect

Domain 2Objective 2

Fundamental Layer 3 Defense GDSA Practice Questions (Page 8)

Part of the Network Security Fundamentals domain, which makes up ~25% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~13–20 in this domain), expect 3–5 from this objective — we provide 36 practice questions to prepare you well beyond it. (estimate)

36questions here

8free pages

10concepts

Questions 36–36

36application · medium
A security analyst is reviewing firewall logs and sees a high volume of ICMP echo requests from a single external IP to all addresses in the internal /24 subnet. The firewall is currently allowing ICMP echo requests. What is the most appropriate Layer 3 defense to mitigate this ping sweep while still allowing necessary ICMP for troubleshooting?
Select an answer first

Finished these 1 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to GDSA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GDSA” is a trademark of its owner, used for identification only.

Fundamental Layer 3 Defense GDSA Practice Questions (Page 8)

Questions 36–36

Keep studying — Network Security Fundamentals