GCIA: GIAC Certified Intrusion AnalystDemo

By GIAC · Question Mode

QuestionQ156

Packet Engineering

With reference to the provided case study, a security goal requires configuring a secure connection between the Boston distribution center and headquarters. You want to implement IP filters to meet the security requirements. How should IP filters be implemented at headquarters?

(Click the Exhibit button on the toolbar to view the case study.)

  • A Add source filters for the headquarters for UDP port 80 and IP protocol 50. Add destination filters for the Boston distribution center for UDP port 80 and IP protocol 50.
  • B Add source filters for the Boston distribution center for UDP port 80 and IP protocol 50. Add destination filters for headquarters for UDP port 80 and IP protocol 50.
  • C Add source filters for the Boston distribution center for UDP port 1701 and IP protocol 50. Add destination filters for the headquarters for UDP port 1701 and IP protocol 50.
  • D Add source filters for the headquarters for UDP port 1701 and IP protocol 50.
Explanation

L2TP/IPsec uses UDP port 1701 for L2TP and IP protocol 50 for Encapsulating Security Payload (ESP). Filters at headquarters must identify the Boston distribution center as the source and headquarters as the destination for this traffic.

Community Discussion

No comments yet. Be the first to start the discussion!