QuestionQ130

Managing and Mitigating Cyber Risk

You are the administrator of a corporate network and are concerned about denial-of-service attacks. Which of the following measures would be most useful for defending against a Denial-of-Service (DoS) attack?

  • A Shorten the timeout for connection attempts.
  • B Place a honey pot in the DMZ.
  • C Implement a strong password policy.
  • D Implement network based antivirus.
Explanation

Shortening the timeout for incomplete connection attempts helps limit resource exhaustion from attacks such as SYN floods. Connections that do not complete are cleared sooner, reducing the time that they consume network or server resources.

Community Discussion

No comments yet. Be the first to start the discussion!