Which of the following methods is an IoT portal administrator most likely to use in order to mitigate Distributed Denial of Service (DDoS) attacks?
Suggested Answer: D
Get Premium ITS-110 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
32 comments · newest first
TO
Tom
11 months ago
I thought IPSec was mainly for security, not DDoS protection.
NI
Nidia
11 months ago
Wait, are we sure traffic scrubbers are enough?
KE
Kenneth
11 months ago
Disabling NAT-T? That sounds risky, not a good idea.
BO
Bobbye
12 months ago
I think A could help too, but not as much as C.
BE
Bettye
12 months ago
C is definitely the best choice for DDoS mitigation.
JU
Justine
12 months ago
I have a vague recollection that IPSec is more about securing connections rather than preventing DDoS. I’m leaning towards option C.
LI
Linsey
1 year ago
I practiced a similar question where implementing traffic scrubbers was highlighted as a key strategy. That might be the right answer here.
CO
Coletta
1 year ago
I'm not entirely sure, but I feel like DNSSEC is more about securing DNS rather than directly mitigating DDoS attacks.
SO
Solange
1 year ago
I remember studying DDoS mitigation techniques, and I think traffic scrubbers are often mentioned as effective.
SO
Sonia
1 year ago
Okay, I've got a strategy for this. DDoS attacks are all about overwhelming the target system with traffic, so the key is to filter and scrub that traffic before it reaches the portal. That's why C is the best answer - the traffic scrubbers at the ISP level can help mitigate the DDoS attack.
TO
Toi
1 year ago
Hmm, I'm a little unsure about this one. I know DNSSEC and IPSec are security protocols, but I'm not sure how they relate to mitigating DDoS attacks specifically. I'll have to think this through carefully.
EM
Emile
1 year ago
This question seems pretty straightforward. I think the answer is C - implementing traffic scrubbers on the upstream ISP connection.
JA
Jaime
1 year ago
I'm pretty confident the answer is C. Disabling NAT-T or requiring IPSec might help with other security concerns, but they don't directly address the DDoS problem. Implementing traffic scrubbers at the ISP is the most effective way to deal with a distributed denial of service attack.
LU
Lucina
1 year ago
Okay, I've got a strategy for this. I'll focus on the common security problems like default credentials, privilege escalation, and file system permissions.
OW
Owen
1 year ago
Ah, the age-old battle against DDoS attacks. I say we just unplug the whole thing and call it a day. Who needs the internet anyway?
EV
Evan
1 year ago
DNSSEC, really? I thought we were trying to stop DDoS, not secure our DNS. Traffic scrubbers all the way, baby!
CA
Carma
1 year ago
C) Implement traffic scrubbers on the upstream Internet Service Provider (ISP) connection
JO
Johnson
1 year ago
B) Disable Network Address Translation Traversal (NAT-T) at the border firewall
EL
Elise
1 year ago
A) Implement Domain Name System Security Extensions (DNSSEC) on all Internet-facing name servers
RI
Rickie
2 years ago
Requiring IPSec for all connections? That's overkill and will just frustrate our users. Let's keep it simple with the traffic scrubbers.
LO
Lorean
1 year ago
C) Implement traffic scrubbers on the upstream Internet Service Provider (ISP) connection
BR
Brianne
1 year ago
B) Disable Network Address Translation Traversal (NAT-T) at the border firewall
JE
Jesusa
1 year ago
A) Implement Domain Name System Security Extensions (DNSSEC) on all Internet-facing name servers
GA
Galen
2 years ago
I'm not sure about disabling NAT-T at the firewall, that could cause connectivity issues for some users. I'd go with the traffic scrubbers too.
AD
Adell
2 years ago
I'm not sure about that. Wouldn't implementing DNSSEC on Internet-facing name servers also help in mitigating DDoS attacks by ensuring the integrity of DNS data?
TE
Teddy
2 years ago
I agree with Maurine. Implementing traffic scrubbers can help filter out malicious traffic and protect the portal from DDoS attacks.
MA
Maurine
2 years ago
I think the IoT portal administrator would most likely use traffic scrubbers on the upstream ISP connection to mitigate DDoS attacks.
GE
Gerry
2 years ago
Option C sounds like the best approach to me. Scrubbing the traffic at the ISP level can effectively mitigate DDoS attacks without causing disruption to the portal.
HE
Heike
1 year ago
I think option C is the best choice for mitigating DDoS attacks on an IoT portal.
TE
Tennie
1 year ago
It's important to have measures in place to protect against DDoS attacks, and option C seems like a proactive approach.
HE
Heidy
2 years ago
Implementing traffic scrubbers at the ISP level can definitely help prevent disruptions to the portal.
JO
Jordan
2 years ago
I agree, option C seems like the most effective way to handle DDoS attacks.