UDP is a connectionless protocol. A large number of UDP flood attacks cause the performance of network devices that rely on session forwarding to be degraded and even the session table is exhausted, causing network congestion.
Which of the following options does not prevent UDP flood attacks?

• A.Current limiting
• B.Associated defense
• C.First packet discarded
• D.UDP fingerprint learning

Comment: *

Name: *

Email: *

Verification: *

IPS is an intelligent intrusion detection and defense product. It can not only detect the occurrence of intrusions, but also can respond in real time through certain response methods.
Stop the occurrence and development of intrusions, and protect the information system from substantial attacks in real time. According to the description of PS, the following items are wrong?

• A.Common IPS deployment modes are in-line deployment,
• B.IPS is an intrusion detection system that can block real-time intrusions when found
• C.IPS unifies IDS and firewall
• D.IPS must use bypass deployment in the network

Comment: *

Name: *

Email: *

Verification: *

An enterprise administrator configures a Web reputation website in the form of a domain name, and configures the domain name as www. abc; example. com. .
Which of the following is the entry that the firewall will match when looking up the website URL?

• A.example
• B.www.abc. example
• C.example. com
• D.www. abc. example. com

Comment: *

Name: *

Email: *

Verification: *

Fraggle attack means that both the source address and the destination address of TCP are set to the IP address of a victim. This behavior will cause the victim to send a SYN-ACK message to its own address, which in turn sends back an ACK message and creates an empty connection, causing the system resources to be occupied or the destination host to crash.

• A.True
• B.False

Comment: *

Name: *

Email: *

Verification: *

Regarding the processing flow of file filtering, which of the following statements is wrong?

• A.After the file decompression fails, the file will still be filtered. .
• B.The file type recognition module is responsible for identifying the true type of the file and the file extension based on the file data
• C.Protocol decoding is responsible for analyzing the file data and file transmission direction in the data stream.
• D.The application identification module can identify the type of application that carries the file.

Comment: *

Name: *

Email: *

Verification: *