Halloween Special 2026! Get Up to 25% OFF Practice Questions! Limited Time - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

CertNexus ITS-110 Exam - Topic 3 Question 42 Discussion

Posted by Sylvia on Sep 14, 2024 at 05:45 AM

Which of the following methods is an IoT portal administrator most likely to use in order to mitigate Distributed Denial of Service (DDoS) attacks?

Suggested Answer: D

Get Premium ITS-110 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test
32 comments · newest first
TO
Tom 11 months ago
I thought IPSec was mainly for security, not DDoS protection.
NI
Nidia 11 months ago
Wait, are we sure traffic scrubbers are enough?
KE
Kenneth 11 months ago
Disabling NAT-T? That sounds risky, not a good idea.
BO
Bobbye 12 months ago
I think A could help too, but not as much as C.
BE
Bettye 12 months ago
C is definitely the best choice for DDoS mitigation.
JU
Justine 12 months ago
I have a vague recollection that IPSec is more about securing connections rather than preventing DDoS. I’m leaning towards option C.
LI
Linsey 1 year ago
I practiced a similar question where implementing traffic scrubbers was highlighted as a key strategy. That might be the right answer here.
CO
Coletta 1 year ago
I'm not entirely sure, but I feel like DNSSEC is more about securing DNS rather than directly mitigating DDoS attacks.
SO
Solange 1 year ago
I remember studying DDoS mitigation techniques, and I think traffic scrubbers are often mentioned as effective.
SO
Sonia 1 year ago
Okay, I've got a strategy for this. DDoS attacks are all about overwhelming the target system with traffic, so the key is to filter and scrub that traffic before it reaches the portal. That's why C is the best answer - the traffic scrubbers at the ISP level can help mitigate the DDoS attack.
TO
Toi 1 year ago
Hmm, I'm a little unsure about this one. I know DNSSEC and IPSec are security protocols, but I'm not sure how they relate to mitigating DDoS attacks specifically. I'll have to think this through carefully.
EM
Emile 1 year ago
This question seems pretty straightforward. I think the answer is C - implementing traffic scrubbers on the upstream ISP connection.
JA
Jaime 1 year ago
I'm pretty confident the answer is C. Disabling NAT-T or requiring IPSec might help with other security concerns, but they don't directly address the DDoS problem. Implementing traffic scrubbers at the ISP is the most effective way to deal with a distributed denial of service attack.
LU
Lucina 1 year ago
Okay, I've got a strategy for this. I'll focus on the common security problems like default credentials, privilege escalation, and file system permissions.
OW
Owen 1 year ago
Ah, the age-old battle against DDoS attacks. I say we just unplug the whole thing and call it a day. Who needs the internet anyway?
EV
Evan 1 year ago
DNSSEC, really? I thought we were trying to stop DDoS, not secure our DNS. Traffic scrubbers all the way, baby!
CA
Carma 1 year ago
↳ replying to Evan
C) Implement traffic scrubbers on the upstream Internet Service Provider (ISP) connection
JO
Johnson 1 year ago
↳ replying to Evan
B) Disable Network Address Translation Traversal (NAT-T) at the border firewall
EL
Elise 1 year ago
↳ replying to Evan
A) Implement Domain Name System Security Extensions (DNSSEC) on all Internet-facing name servers
RI
Rickie 2 years ago
Requiring IPSec for all connections? That's overkill and will just frustrate our users. Let's keep it simple with the traffic scrubbers.
LO
Lorean 1 year ago
↳ replying to Rickie
C) Implement traffic scrubbers on the upstream Internet Service Provider (ISP) connection
BR
Brianne 1 year ago
↳ replying to Rickie
B) Disable Network Address Translation Traversal (NAT-T) at the border firewall
JE
Jesusa 1 year ago
↳ replying to Rickie
A) Implement Domain Name System Security Extensions (DNSSEC) on all Internet-facing name servers
GA
Galen 2 years ago
I'm not sure about disabling NAT-T at the firewall, that could cause connectivity issues for some users. I'd go with the traffic scrubbers too.
AD
Adell 2 years ago
I'm not sure about that. Wouldn't implementing DNSSEC on Internet-facing name servers also help in mitigating DDoS attacks by ensuring the integrity of DNS data?
TE
Teddy 2 years ago
I agree with Maurine. Implementing traffic scrubbers can help filter out malicious traffic and protect the portal from DDoS attacks.
MA
Maurine 2 years ago
I think the IoT portal administrator would most likely use traffic scrubbers on the upstream ISP connection to mitigate DDoS attacks.
GE
Gerry 2 years ago
Option C sounds like the best approach to me. Scrubbing the traffic at the ISP level can effectively mitigate DDoS attacks without causing disruption to the portal.
HE
Heike 1 year ago
↳ replying to Gerry
I think option C is the best choice for mitigating DDoS attacks on an IoT portal.
TE
Tennie 1 year ago
↳ replying to Gerry
It's important to have measures in place to protect against DDoS attacks, and option C seems like a proactive approach.
HE
Heidy 2 years ago
↳ replying to Gerry
Implementing traffic scrubbers at the ISP level can definitely help prevent disruptions to the portal.
JO
Jordan 2 years ago
↳ replying to Gerry
I agree, option C seems like the most effective way to handle DDoS attacks.
0/2000 characters

Save Cancel