A Network Administrator Is Concerned About a Particular Server That

question 198

Multiple Choice

A network administrator is concerned about a particular server that is attacked occasionally from hosts on the Internet. The server is not critical; however, the attacks impact the rest of the network. While the company's current ISP is cost effective, the ISP is slow to respond to reported issues. The administrator needs to be able to mitigate the effects of an attack immediately without opening a trouble ticket with the ISP. The ISP is willing to accept a very small network route advertised with a particular BGP community string. Which of the following is the BEST way for the administrator to mitigate the effects of these attacks?

• A) Use the route protection offered by the ISP to accept only BGP routes from trusted hosts on the Internet, which will discard traffic from attacking hosts.
• B) Work with the ISP and subscribe to an IPS filter that can recognize the attack patterns of the attacking hosts, and block those hosts at the local IPS device.
• C) Advertise a /32 route to the ISP to initiate a remotely triggered black hole, which will discard traffic destined to the problem server at the upstream provider.
• D) Add a redundant connection to a second local ISP, so a redundant connection is available for use if the server is being attacked on one connection.

---

Definitions:

Existing Business

An enterprise that is currently operational and has gone past the startup phase, often with established customers, revenue streams, and market presence.

Trade

The exchange of goods or services between parties, which can be within or across borders.

Intermediation Revenue

Income generated by serving as an intermediary in transactions between two or more parties, such as brokerage fees or commissions.

Third Parties

Entities or individuals who are not directly involved in a transaction or contract but may be affected by it or have a relevant interest.