Cisco Exam 350-201 Topic 12 Question 105 Discussion

Actual exam question for Cisco's 350-201 exam

Question #: 105
Topic #: 12

Refer to the exhibit.

An engineer must tune the Cisco IOS device to mitigate an attack that is broadcasting a large number of ICMP packets. The attack is sending the victim's spoofed source IP to a network using an IP broadcast address that causes devices in the network to respond back to the source IP address. Which action does the engineer recommend?

AUse command ip verify reverse-path interface

BUse global configuration command service tcp-keepalives-out

CUse subinterface command no ip directed-broadcast

DUse logging trap 6

Show Suggested Answer

Suggested Answer: A

by Gail at Jan 25, 2025, 04:23 AM

Limited Time Offer

25%

Off

Get Premium 350-201 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Nettie

11 days ago

Option A seems promising, but I'm not sure it's the complete solution. Verifying reverse-path forwarding is a good start, but we might need to do more.

upvoted 0 times

...

Deeanna

12 days ago

Haha, Option D is a classic! Logging everything at level 6 is definitely not the way to go. Way too much data!

upvoted 0 times

...

Malcolm

13 days ago

I'm not sure Option B is relevant here. Enabling TCP keepalives doesn't seem to address the ICMP flooding issue.

upvoted 0 times

...

24 days ago

I think the engineer should recommend using command ip verify reverse-path interface.

upvoted 0 times

...