Discuss Cisco 400-007 Exam Topic 4 Question 70

You were tasked to enhance the security of a network with these characteristics:

* A pool of servers is accessed by numerous data centers and remote sites

* The servers are accessed via a cluster of firewalls

* The firewalls are configured properly and are not dropping traffic

* The firewalls occasionally cause asymmetric routing of traffic within the server data center.

Which technology should you recommend to enhance security by limiting traffic that could originate from a hacker compromising a workstation and redirecting flows at the servers?

APoison certain subnets by adding static routes to Null0 on the core switches connected to the pool of servers.

BDeploy uRPF strict mode.

CLimit sources of traffic that exit the server-facing interface of the firewall cluster with ACLs.

DDeploy uRPF loose mode

Suggested Answer: C

Get Premium 400-007 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

31 comments · newest first

Elenore 6 months ago

B is the best option. It ensures only legitimate sources are allowed.

Ronald 6 months ago

C is my pick too. It directly controls traffic flow.

Remedios 6 months ago

D feels too relaxed. Loose mode might let too much through.

Marget 6 months ago

A is interesting, but I'm not sure about poisoning subnets.

Luisa 7 months ago

I agree, but C could also work well. ACLs can really limit unwanted traffic.

Bobbye 7 months ago

I'm leaning towards B. uRPF strict mode seems solid for security.

Nicolette 7 months ago

A) Poisoning subnets? That sounds risky!

Iluminada 7 months ago

Totally agree with B! It really tightens security.

Francene 7 months ago

Wait, isn’t uRPF strict mode too restrictive?

Huey 8 months ago

C) Limit sources with ACLs is a good idea too!

Willard 8 months ago

Poison subnets? What is this, a video game? C) is the clear winner.

Marvel 8 months ago

D) uRPF loose mode? Really? That's like putting a bandaid on a bullet wound.

Geoffrey 8 months ago

Hmm, I'm torn between B and C. Gotta love those asymmetric routing challenges!

Carma 9 months ago

B) uRPF strict mode would be my pick to enhance security and prevent spoofing.

Olive 9 months ago

C) Limiting sources of traffic with ACLs sounds like the way to go here.

Oretha 9 months ago

Poisoning subnets sounds risky, but I recall it being a method to manage routing issues. I wonder if it would really enhance security in this scenario.

Aliza 9 months ago

I'm a bit confused about the difference between uRPF strict and loose modes. I feel like I need to review that section again before making a decision.

Darrin 9 months ago

I think limiting sources with ACLs could be effective, especially since it directly controls what can exit the firewall. I practiced a similar question on that.

Jennifer 9 months ago

I remember studying about uRPF, but I'm not entirely sure if strict mode is the right choice here. It seems like it could help with asymmetric routing, though.

Broderick 10 months ago

I'm feeling pretty confident about this one. Limiting the sources with ACLs is definitely the way to go to lock down that server pool and prevent potential hacker traffic.

Wilbert 10 months ago

Okay, I think I've got it. The key is to limit the traffic sources on the firewall cluster to prevent any redirected flows from reaching the servers. ACLs seem like the way to go here to enhance the security.

Shaun 10 months ago

I’d go with B) Deploy uRPF strict mode. Seems solid.

Roselle 11 months ago

Haha, Null0 routing, now that's a blast from the past! Gotta go with C) though.

Ashlee 11 months ago

Poison the subnets? I don't know, that sounds a bit risky. I'd be worried about accidentally blocking legitimate traffic. The ACL approach seems safer and more targeted.

Cory 11 months ago

Hmm, I'm a bit confused. Is uRPF strict mode a better option to consider here? I'm not sure how that would work to limit the traffic compared to ACLs.

Hester 11 months ago

I think I know the answer to this one. Limiting the sources of traffic with ACLs on the firewall cluster seems like the best way to enhance security and prevent potential hacker traffic from reaching the servers.

Berry 5 months ago

↳ replying to Hester

I think it’s the best option too!

Tandra 6 months ago

↳ replying to Hester

Plus, it’s a straightforward solution.

Zona 6 months ago

↳ replying to Hester

ACLs can really help control traffic flow.

Maybelle 10 months ago

↳ replying to Hester

Definitely, it adds an extra layer of security.

Virgina 10 months ago

↳ replying to Hester

I agree, using ACLs makes sense!

Cisco 400-007 Exam - Topic 4 Question 70 Discussion