Question

A bank is experiencing a DOS attack against an application designed to handle 500IP-based sessions. In addition, the perimeter router can only handle 1 Gbps of traffic. Which of the following should be implemented to prevent a DOS attack in the future?

A. Deploy multiple web servers and implement a load balancer
B. Increase the capacity of the perimeter router to 10 Gbps
C. Install a firewall at the network to prevent all attacks
D. Use redundancy across all network devices and services

Answer 1

Option C

Step-by-step explanation:

Denial of Service (DoS) attacks is attack in which attackers make it impossible for network users to access services by flooding the network with requests.

The bank can block the originating IP address, either at the firewall level or further upstream at the ISP level.

The bank can also use security tools to detect and prevent ICMP flood attacks. For example, Web servers can be configured to detect and block HTTP attacks.