ISS (Statistical Services) Statistics Paper I (New 2016 MCQ Pattern): Questions 1 of 472

Question

MCQ▾

What is the countermeasure for IP address spoofing?

Choices

Choice (4) Response

a.

By enforcing a rule that the first fragment of a packet must contain a predefined minimum amount of the transport header.

b.

To discard packets with inside source address if the packet arrives on an external interface.

c.

To discard all packets that do not analyze the source routing information.

d.

Question does not provide sufficient data or is vague

Answer

b.

Explanation

In IP address spoofing the intruder transmits packets from the outside with a source IP address field containing an address of an internal host. The attacker hopes that the use of a spoofed address will allow penetration of systems that employ simple source address security, in which packets from specific trusted internal hosts are accepted. The countermeasure is to discard packets with an inside source address if the packet arrives on an external interface.

Knowing the Concept of Firewall

Developed by: