1.8 Create and Apply DoS Protection Profiles NETWORK-SECURITY-ANALYST Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A company has a DoS protection profile applied to its DMZ zone. The profile has SYN flood protection set to 'alert' and ICMP flood protection set to 'drop'. During a recent incident, the administrator noticed that the SYN flood protection was not stopping the attack, only logging it. What is the most likely reason for this?

   • AThe SYN flood action is set to 'alert', which only logs the event and does not drop or mitigate the traffic.
   • BThe ICMP flood action is set to 'drop', which is interfering with the SYN flood protection.
   • CThe SYN flood threshold is set too high, so the attack did not exceed the threshold.
   • DThe profile is not applied to the correct zone, so it is not processing the SYN traffic.
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A small business is experiencing frequent UDP flood attacks against its public DNS server. The administrator wants to use a DoS protection profile to mitigate these attacks. What is the primary purpose of creating and applying a DoS protection profile in this scenario?

   • ATo encrypt all UDP traffic to the DNS server to protect it from interception.
   • BTo block all UDP traffic to the DNS server to prevent any potential attack.
   • CTo monitor and limit the rate of UDP traffic to the DNS server to prevent resource exhaustion.
   • DTo redirect UDP traffic to a different server to balance the load.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   Which of the following is a valid target for applying a DoS protection profile?

   • AA virtual wire interface
   • BA security policy rule
   • CA routing table
   • DA DHCP server
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A company is planning to deploy a DoS protection profile for the first time. The security team is discussing what the profile can do. Which statement accurately describes the function of a DoS protection profile?

   • AIt performs deep packet inspection to detect and block malware.
   • BIt encrypts traffic to prevent attackers from intercepting sensitive data.
   • CIt blocks all traffic from a specific IP address that is known to be malicious.
   • DIt monitors traffic rates and takes action when thresholds are exceeded to mitigate flood attacks.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   Which of the following flood types can be configured in a DoS protection profile?

   • ASMTP flood
   • BHTTP flood
   • CDNS flood
   • DICMP flood
   Reveal Solution Discussion Select an answer first