Refer to the exhibit. What should an engineer determine from this Wireshark capture of suspicious network traffic?
Refer To The Ex 1 (335.35 KiB) Viewed 71 times
A. There are signs of SYN flood attack, and the engineer should increase the backlog and recycle the oldest half-open TCP connections.
B. There are signs of a malformed packet attack, and the engineer should limit the packet size and set a threshold of bytes as a countermeasure.
C. There are signs of a DNS attack, and the engineer should hide the BIND version and restrict zone transfers as a countermeasure.
D. There are signs of ARP spoofing, and the engineer should use Static ARP entries and IP address-to-MAC address mappings as a countermeasure.
Join a community of subject matter experts. Register for FREE to view solutions, replies, and use search function. Request answer by replying!