SSCP: Systems Security Certified Practitioner

By ISC · Question Mode

QuestionQ128

VerifiedNetwork and Communications Security

In the setting of external-attacker network enumeration and potential Distributed Denial of Service (DDoS) attacks, which firewall rule below is inappropriate for protecting an organization’s internal network?

Explanation

Dropping inbound ICMP echo requests prevents external systems from eliciting ping replies for host discovery and avoids responding to unsolicited ICMP echo traffic. ICMP echo requests and corresponding echo replies can be permitted for connections initiated from inside the network, but outbound echo replies are unnecessary when inbound echo requests are blocked.

Community Discussion

No comments yet. Be the first to start the discussion!