Discuss Cisco 500-490 Exam Topic 3 Question 73

Which two statements regarding Cisco SD-WAN vEdge routers can mitigate DoS attacks against the infrastructure? (Choose two.)

AThe vEdge routers run on hardened Linux operating systems.

BOnly authorized controllers are allowed to communicate back to the vEdg e router after the vEdge router establishes connection with the controllers.

CIn case of direct Internet access, the only traffic allowed back is the traffic matching the state table entries on the vEdge router.

DOpen Certificate Authority and automated enrollment feature.

EBy default, all incoming traffic is denied at the transport (WAN) side interfaces.

Suggested Answer: C

Get Premium 500-490 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

31 comments · newest first

Merlyn 11 months ago

I agree with A and B, they really help secure the network.

Justine 11 months ago

C is also a good option, but I’m not sure about D.

Nicholle 11 months ago

Wait, does E mean all traffic is blocked by default? That's surprising!

Lou 11 months ago

I think B is more important than A.

Lou 12 months ago

A and E are definitely the right choices.

Elenora 12 months ago

I recall that denying incoming traffic by default is a common security practice, so option E might be a good choice too.

Mirta 1 year ago

I feel like I studied about hardened operating systems, but I'm not convinced that option A is directly related to mitigating DoS attacks.

Lisandra 1 year ago

I'm not entirely sure about the specifics, but I remember something about traffic being restricted based on state tables. Maybe that's option C?

Crissy 1 year ago

I think option B sounds familiar because it emphasizes authorized communication, which is crucial for security.

Jesus 1 year ago

I remember learning about the default deny policy on the WAN interfaces in option E. That seems like a good security measure to mitigate DoS attacks by blocking unauthorized traffic. I'll make sure to select that one as well.

Leatha 1 year ago

The open certificate authority and automated enrollment feature in option D could also be relevant, as it helps with secure authentication. But I'm not as confident about that one. I'll focus on options B and C for now.

Vilma 1 year ago

Okay, I think the key here is controlling the communication back to the vEdge routers. Options B and C both seem relevant, as they restrict access and only allow authorized traffic. I'll mark those two.

Virgina 1 year ago

Hmm, I'm a bit unsure about this one. I know the vEdge routers run on a hardened Linux OS, but I'm not sure if that's enough on its own to mitigate DoS attacks. I'll need to review the other options more closely.

Candida 1 year ago

This looks like a tricky question about Cisco SD-WAN security features. I'll need to carefully read through the options and think about which ones would help mitigate DoS attacks.

Serina 1 year ago

Ooh, this is a tricky one. I'm going to go with B and E. Gotta love that hardened Linux and default deny-all approach to keep those DoS attackers at bay!

Chara 1 year ago

↳ replying to Serina

User3: Definitely, those features help keep the infrastructure secure from potential attacks.

Cristen 1 year ago

↳ replying to Serina

User2: Agreed, having only authorized controllers communicate and denying all incoming traffic by default is key.

Jamie 1 year ago

↳ replying to Serina

User1: I think B and E are the way to go for mitigating DoS attacks.

Sanjuana 2 years ago

I'm going with B and C. Controlling the communication back to the vEdge routers and restricting the incoming traffic are key for protecting the infrastructure.

Diego 1 year ago

↳ replying to Sanjuana

Yes, restricting the incoming traffic based on state table entries is also important for security.

Kristeen 1 year ago

↳ replying to Sanjuana

I agree, controlling the communication back to the vEdge routers is crucial.

Kattie 2 years ago

Haha, I bet the right answers involve some kind of security lockdown. These vEdge routers must be like digital fortresses against those pesky DoS attacks!

Latrice 2 years ago

B and E seem to be the way to go. Limiting the allowed communication and denying all incoming traffic by default is a solid security approach.

Estrella 2 years ago

I'm not sure about A, but I think E is definitely one of the correct answers. Denying incoming traffic is crucial for security.

Amber 2 years ago

I agree with Audra. A and E make sense because hardened Linux OS and denying incoming traffic can help mitigate DoS attacks.

Audra 2 years ago

I think the answer is A and E.

Berry 2 years ago

I think B and C are the correct answers. The vEdge routers need to be hardened against unauthorized access, and controlling the traffic flow is crucial for mitigating DoS attacks.

Lashandra 1 year ago

↳ replying to Berry

By default, all incoming traffic is denied at the transport interfaces to prevent unauthorized access.

Dawne 1 year ago

↳ replying to Berry

Controlling the traffic flow based on state table entries is crucial for security.

Hyun 1 year ago

↳ replying to Berry

It's important to only allow authorized controllers to communicate with the vEdge router.

Nobuko 1 year ago

↳ replying to Berry

I agree, B and C are the correct answers.

Cisco 500-490 Exam - Topic 3 Question 73 Discussion