MENU
Refer to the exhibit:
Router 1 was experiencing a DDoS attack that was traced to interface gjgabitethernet0/1.
Which statement about this configuration is true?
34 comments · newest first
NI
Nickole
10 months ago
B seems off, private addresses shouldn't be accepted like that.
LE
Lettie
10 months ago
I think D is more accurate, it focuses on reachable addresses.
AL
Alfreda
11 months ago
C is incorrect, it wouldn't accept all traffic like that.
AL
Alise
11 months ago
Wait, can it really drop all that traffic? Sounds too strict!
FL
Fletcher
11 months ago
A is definitely true, it drops traffic not matching the FIB.
RE
Regenia
11 months ago
C seems too broad; I don't think all traffic would be accepted, especially during an attack.
JE
Jesse
11 months ago
I feel like B could be a trap answer. Private addresses are usually filtered, right?
ON
Onita
12 months ago
I remember practicing a question like this where the FIB entries were crucial. I might lean towards D, but I need to double-check.
RO
Ronald
12 months ago
I think option A sounds familiar, but I'm not entirely sure if it applies to DDoS scenarios specifically.
JO
Johnetta
1 year ago
This is a good opportunity to apply my knowledge of router access control and security features. I'll need to carefully consider each answer choice and how it aligns with best practices for mitigating DDoS attacks.
VI
Viki
1 year ago
Okay, the key seems to be understanding how Router 1 handles traffic that comes in on the gigabitethernet0/1 interface. I'll need to think through the different options and how they relate to the DDoS scenario.
TA
Tasia
1 year ago
Hmm, the question is asking about the behavior of Router 1 specifically. I'll need to focus on the information provided about that router and the interface experiencing the DDoS attack.
AM
Amie
1 year ago
This looks like a tricky one. I'll need to carefully read through the question and options to make sure I understand the key details about the DDoS attack and the router configuration.
YU
Yuriko
1 year ago
Can't we just unplug the router and call it a day? No wonder they're getting DDoS'd with these outdated configs.
TI
Tiara
1 year ago
Let's focus on implementing proper security measures instead of taking drastic actions.
EL
Elza
1 year ago
Unplugging the router won't solve the issue, we need to address the root cause.
BR
Breana
1 year ago
We need to update the configuration to prevent future attacks.
SA
Salina
1 year ago
Ha! I bet the routers just have a bunch of 'duct tape and bailing wire' holding them together. Option C is my pick.
LA
Lasandra
1 year ago
I'm leaning towards Option B. If this is a DDoS attack, the router should block private addresses to mitigate the issue.
DI
Diego
1 year ago
User 3: I'm not sure, but Option D also sounds plausible. It mentions accepting source addresses that are reachable through a real interface.
BE
Bette
1 year ago
User 2: I agree with Bette. Option A seems like the most logical choice.
KA
Katy
1 year ago
User 1: I think Option A is correct. The router drops traffic with FIB entries that exit a different interface.
DO
Dorthy
1 year ago
User 3: I'm not sure, but Option B does make sense. Blocking private addresses could help prevent the DDoS attack.
QU
Quentin
1 year ago
User 2: I disagree, I believe Option D is the right choice. The router only accepts source addresses that are reachable through a real interface.
HE
Helaine
1 year ago
User 1: I think Option A is correct. The router drops traffic with FIB entries that exit a different interface.
HE
Heike
2 years ago
Hmm, I think Option D is the correct answer. The router should only accept traffic with valid FIB entries, not just any private addresses.
WE
Wendell
1 year ago
Yeah, I see your point. Option D provides a more secure configuration for the router.
MA
Margot
1 year ago
I think Option D is still the best choice because it ensures that the source addresses are reachable through a real interface.
AN
Anissa
1 year ago
But what about Option A? It mentions dropping traffic with FIB entries that exit a different interface.
OL
Olene
1 year ago
I agree, Option D seems to be the most logical choice.
TA
Tammi
2 years ago
That's a good point, but I still think D is the correct answer based on the configuration provided in the exhibit.
DA
Daryl
2 years ago
I disagree, I believe the answer is A because dropping traffic with a FIB entry that exits a different interface would help prevent DDoS attacks.
FL
Fletcher
2 years ago
Option A sounds reasonable, but I'm not sure if it's the complete answer. We need more context on the DDoS attack and the router's configuration.
TA
Tammi
2 years ago
I think the answer is D because it makes sense to only accept traffic from a source address that is reachable through a real interface.