A. Ensure that a stateful firewall allows only HTTP traffic destined for valid web server IP addresses.
B. Ensure that a firewall has SYN flood and DDoS protection applied specifically for valid web servers.
C. Ensure that your firewall enforces HTTP protocol compliance to ensure that only valid flows are allowed inand outof your network.
D. Ensure that HTTP is always authenticated.
E. Ensure that your web server is in a different zone than your backend servers such as SQL and DNS.
您可能感興趣的試卷
你可能感興趣的試題
A. Spanning tree protect
B. Root Guard and BPDU Guard
C. Unicast Reverse Path Forwarding
D. MAC spoof guard
E. Port Security
A. Anomaly Detection
B. SYN Cookies
C. Application Inspection
D. Content filtering
E. Anti-X Protection
F. Anti Virus
A. Storm Control
B. Port security
C. CAM table size definition
D. IP spoof prevention
E. Network Based Application Recognition
A. SDEE
B. Telnet
C. Console
D. FTP
E. HTTPS
F. SSH
A. An active-x applicationor a java script application
B. A java script application and a PHP application.
C. A fully compiled .NET framework application
D. A fully operational Visual Basic application
E. A java applet running in the context of your browser or a stand alone application using the java run-timeenvironment
最新試題
Which access methods can CS-MARS use toget configuration information from an Adaptive SecurityAppliance （ASA）？ （）
Which should be the key driver for a company security policy’s creation， implementation and enforcement？（）
CSA protects your host by： （）
Which of these is the best way to provide sender non-repudiation？（）
TACACS+ authentication uses whichthree packet types？ （）
What Cisco technology protects against Spanning-Tree Protocol manipulation？（）
CS-MARS works with which IOS feature to accomplish anomaly detection？（）
Which Cisco security software product mitigates Day Zero attacks on desktops and servers - stopping known and unknown attacks without requiring reconfigurations or updates on the endpoints？（）
When configuring a multipoint GRE （mGRE） tunnel interface， which one of the following is NOT a valid configuration option：（）
Which of the following is true about RADIUSV end or Specific Attribute？ （）