CertNexus Exam ITS-110 Topic 3 Question 42 Discussion

Actual exam question for CertNexus's ITS-110 exam

Question #: 42
Topic #: 3

Which of the following methods is an IoT portal administrator most likely to use in order to mitigate Distributed Denial of Service (DDoS) attacks?

AImplement Domain Name System Security Extensions (DNSSEC) on all Internet-facing name servers

BDisable Network Address Translation Traversal (NAT-T) at the border firewall

CImplement traffic scrubbers on the upstream Internet Service Provider (ISP) connection

DRequire Internet Protocol Security (IPSec) for all inbound portal connections

Show Suggested Answer

Suggested Answer: D

by Sylvia at Sep 14, 2024, 05:45 AM

Limited Time Offer

25%

Off

Get Premium ITS-110 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Owen

1 months ago

Ah, the age-old battle against DDoS attacks. I say we just unplug the whole thing and call it a day. Who needs the internet anyway?

upvoted 0 times

...

Evan

1 months ago

DNSSEC, really? I thought we were trying to stop DDoS, not secure our DNS. Traffic scrubbers all the way, baby!

upvoted 0 times

Carma

16 hours ago

C) Implement traffic scrubbers on the upstream Internet Service Provider (ISP) connection

upvoted 0 times

...

Johnson

3 days ago

B) Disable Network Address Translation Traversal (NAT-T) at the border firewall

upvoted 0 times

...

Elise

19 days ago

A) Implement Domain Name System Security Extensions (DNSSEC) on all Internet-facing name servers

upvoted 0 times

...

Rickie

2 months ago

Requiring IPSec for all connections? That's overkill and will just frustrate our users. Let's keep it simple with the traffic scrubbers.

upvoted 0 times

Lorean

1 months ago

C) Implement traffic scrubbers on the upstream Internet Service Provider (ISP) connection

upvoted 0 times

...

Brianne

2 months ago

B) Disable Network Address Translation Traversal (NAT-T) at the border firewall

upvoted 0 times

...

Jesusa

2 months ago

A) Implement Domain Name System Security Extensions (DNSSEC) on all Internet-facing name servers

upvoted 0 times

...

Galen

2 months ago

I'm not sure about disabling NAT-T at the firewall, that could cause connectivity issues for some users. I'd go with the traffic scrubbers too.

upvoted 0 times

...

Adell

2 months ago

I'm not sure about that. Wouldn't implementing DNSSEC on Internet-facing name servers also help in mitigating DDoS attacks by ensuring the integrity of DNS data?

upvoted 0 times

...

Teddy

2 months ago

I agree with Maurine. Implementing traffic scrubbers can help filter out malicious traffic and protect the portal from DDoS attacks.

upvoted 0 times

...

Maurine

2 months ago

I think the IoT portal administrator would most likely use traffic scrubbers on the upstream ISP connection to mitigate DDoS attacks.

upvoted 0 times

...

Gerry

2 months ago

Option C sounds like the best approach to me. Scrubbing the traffic at the ISP level can effectively mitigate DDoS attacks without causing disruption to the portal.

upvoted 0 times