ISS (Statistical Services) Statistics Paper I (New 2016 MCQ Pattern): Questions 1 of 469

» Computer Application and Data Processing » Network » Firewall

MCQ▾

Question

What is the countermeasure for IP address spoofing?

Choices

Choice (4) Response

a.

To discard all packets that do not analyze the source routing information.

b.

By enforcing a rule that the first fragment of a packet must contain a predefined minimum amount of the transport header.

c.

To discard packets with inside source address if the packet arrives on an external interface.

d.

All of the above

Answer

c.

Explanation

In IP address spoofing the intruder transmits packets from the outside with a source IP address field containing an address of an internal host. The attacker hopes that the use of a spoofed address will allow penetration of systems that employ simple source address security, in which packets from specific trusted internal hosts are accepted. The countermeasure is to discard packets with an inside source address if the packet arrives on an external interface.

Knowing the concept of firewall

Knowing the Concept of Firewall

Understanding what is firewall?

f Page
Sign In