600-199 試験問題を無料オンラインアクセス

Which three symptoms are best used to detect a TCP SYN flood attack? (Choose three.)

• A.large number of sockets in SYN_RECV state on target server
• B.network monitoring devices report large number of unACKed SYNs sent to target server
• C.target server crashes repeatedly
• D.high memory utilization on target server
• E.user experience with target server is slow or unresponsive

Which data from previous network attacks should be used to recommend architectural changes based on potential future impact?

• A.known vulnerabilities
• B.STP topology changes
• C.IPS signature logs
• D.security audit reports
• E.SNMP statistics

Refer to the exhibit.

Which DNS Query Types pertains to email?

• A.NS?
• B.A?
• C.MX?
• D.SOA?
• E.TXT?
• F.PTR?

Which two measures would you recommend to reduce the likelihood of a successfully executed network attack from the Internet? (Choose two.)

• A.Deploy a stateful edge firewall.
• B.Completely disconnect the network from the Internet.
• C.Implement a password management policy for remote users.
• D.Buy an insurance policy against attack-related business losses.

After an attack has occurred, which two options should be collected to help remediate the problem? (Choose two.)

• A.packet captures
• B.NAT translation table
• C.syslogs from affected devices
• D.connection table information
• E.NetFlow data