Peter has just been hired as a network engineer and has recently been examining the company's core router configuration. He notices that the current configuration would allow an incoming packet from the Internet to have a source IP address within the 10.0.0.0/8, 172.16.0.0/12, or 192.168.0.0/16 address space. Which of the following should Peter do?
A) Create a rule on the switches that connect to the router to discard any traffic with those addresses in the source IP field.
B) Modify the ACL on the router to prevent the traffic from transferring to the internal network from the Internet for those addresses.
C) Replace the router with a stateless firewall.
D) Nothing. The router configuration is correct.

Question

Quizplus · Accepted Answer

The correct action is to modify the Access Control List (ACL) on the router to prevent traffic with private IP addresses (10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16) from entering the internal network from the Internet. This is a common security measure to prevent IP spoofing attacks.

Peter Has Just Been Hired as a Network Engineer and Has