A Security Analyst Is Reviewing the Following Packet Capture of an Attack

question 805

Multiple Choice

A security analyst is reviewing the following packet capture of an attack directed at a company's server located in the DMZ: Which of the following ACLs provides the BEST protection against the above attack and any further attacks from the same IP, while minimizing service interruption?

• A) DENY TCO From ANY to 172.31.64.4
• B) Deny UDP from 192.168.1.0/24 to 172.31.67.0/24
• C) Deny IP from 192.168.1.10/32 to 0.0.0.0/0
• D) Deny TCP from 192.168.1.10 to 172.31.67.4

---

Definitions:

Market-Value Weighted

An indexing method where the weight of each constituent security in an index or portfolio is based on its total market capitalization, favoring larger companies.

Dow Jones Industrial Average

A stock market index that measures the stock performance of 30 large companies listed on stock exchanges in the United States.

Fixed-Income Market

This market encompasses investments that pay a fixed return over a period, such as government and corporate bonds.