QUESTION: 205

Data centers often rely on either traditional firewalls or next generation firewalls. Select the core weakness of the traditional or next generation firewalls when it comes to DDoS attacks.

They are limited in amount of connections per second and the amount of sustained connections they can handle
The cost performance ratio of next generation firewalls is too high.
The agility of traditional firewalls is too limited when it comes to DDoS attacks.
Data center traffic is primarily outbound.

Answer(s): A

Reveal Solution Next Question

QUESTION: 206

Select the question you would ask your customer related to DNS attacks. Based on the material, choose the most appropriate question.

How do you secure you DNS infrastructure against attacks?
Do you rely on your network firewall to protect you DNS server?
Do you over-provision your DNS infrastructure?
Do you regularly update BIND or some other DNS application to the latest release?

Answer(s): A

Reveal Solution Next Question

QUESTION: 207

Why does the F5 Application Delivery Firewall solution mitigate SSL attacks more effectively than any other firewalls?

Because F5 has unlimited capacity to handle SSL traffic.
Because F5 has full visibility and control of SSL traffic.
Because F5 has a separate iApp to handle SSL traffic.
Because F5 supports large SSL key sizes.

Answer(s): B

Reveal Solution Next Question

Assume a client's traffic is being processed only by a NAT; no SNAT or virtual server processing takes place. Also assume that the NAT definition specifies a NAT address and an origin address while all other settings are left at their defaults. If the origin server were to initiate traffic via the BIG-IP, what changes, if any, would take place when the BIG-IP processes such packets?

The BIG-IP would drop the request since the traffic didn’t arrive destined to the NAT address.
The source address would not change, but the destination address would be changed to the NAT address.
The source address would be changed to the NAT address and destination address would be left unchanged.
The source address would not change, but the destination address would be changed to a self-IP of the BIG-IP.

Answer(s): C

Reveal Solution Next Question

Free 101 Exam Braindumps (page: 52)

QUESTION: 205

QUESTION: 206

QUESTION: 207

QUESTION: 208