A. Ensure that a stateful firewall allows only HTTP traffic destined for valid web server IP addresses.
B. Ensure that a firewall has SYN flood and DDoS protection applied specifically for valid web servers.
C. Ensure that your firewall enforces HTTP protocol compliance to ensure that only valid flows are allowed inand outof your network.
D. Ensure that HTTP is always authenticated.
E. Ensure that your web server is in a different zone than your backend servers such as SQL and DNS.
您可能感興趣的試卷
你可能感興趣的試題
A. Spanning tree protect
B. Root Guard and BPDU Guard
C. Unicast Reverse Path Forwarding
D. MAC spoof guard
E. Port Security
A. Anomaly Detection
B. SYN Cookies
C. Application Inspection
D. Content filtering
E. Anti-X Protection
F. Anti Virus
A. Storm Control
B. Port security
C. CAM table size definition
D. IP spoof prevention
E. Network Based Application Recognition
A. SDEE
B. Telnet
C. Console
D. FTP
E. HTTPS
F. SSH
A. An active-x applicationor a java script application
B. A java script application and a PHP application.
C. A fully compiled .NET framework application
D. A fully operational Visual Basic application
E. A java applet running in the context of your browser or a stand alone application using the java run-timeenvironment
最新試題
Choose the most correct statements about SMTP/ESMTP. （）
Which two statements are correct about the aaa authentication login default grouptacacs+ localglobal configuration command？ （）
For a router to obtain a certificate from a CA， what is the first stepof the certificate enrollment process？（）
Which access methods can CS-MARS use toget configuration information from an Adaptive SecurityAppliance （ASA）？ （）
What group in Cisco IOS does 1536-bit Diffie-Hellman prime modulus equivalent too？（）
Which SSL protocol takes anapplication message tobe transmitted， fragments the datainto manageable blocks， optionally compresses the data， applies a MAC， encrypts， adds a header， and transmits the resulting unit ina TCPsegment？（）
Which of these is the best way to provide sender non-repudiation？（）
Since HTTP is one of the most common protocols used in the internet， what should be done at a firewall level to ensure thatthe protocol is being used correctly？ （）
Which statements are true concerning NAT？ （）
When implementing best practices for IP Source Address Spoofing and Defeating Denial of Service Attacks with IP SourceAddress Spoofing， what RFC is commonly usedto protect your network？（）