A network administrator is concerned about a particular server that is attacked occasionally from hosts on the Internet. The server is not critical; however, the attacks impact the rest of the network. While the company's current ISP is cost effective, the ISP is slow to respond to reported issues. The administrator needs to be able to mitigate the effects of an attack immediately without opening a trouble ticket with the ISP. The ISP is willing to accept a very small network route advertised with a particular BGP community string. Which of the following is the BEST way for the administrator to mitigate the effects of these attacks?
A) Use the route protection offered by the ISP to accept only BGP routes from trusted hosts on the Internet, which will discard traffic from attacking hosts.
B) Work with the ISP and subscribe to an IPS filter that can recognize the attack patterns of the attacking hosts, and block those hosts at the local IPS device.
C) Advertise a /32 route to the ISP to initiate a remotely triggered black hole, which will discard traffic destined to the problem server at the upstream provider.
D) Add a redundant connection to a second local ISP, so a redundant connection is available for use if the server is being attacked on one connection.
Correct Answer:
Verified
Q225: The Chief Information Security Officer (CISO) of
Q226: Staff members are reporting an unusual number
Q227: A vulnerability was recently announced that allows
Q228: A Chief Information Security Officer (CISO) of
Q229: A manufacturing company recently recovered from an
Q231: Following a recent outage, a systems administrator
Q232: A Chief Information Security Officer (CISO) needs
Q233: A security administrator is reviewing the following
Q234: A developer is reviewing the following transaction
Q235: A security analyst is classifying data based
Unlock this Answer For Free Now!
View this answer and more for free by performing one of the following actions
Scan the QR code to install the App and get 2 free unlocks
Unlock quizzes for free by uploading documents