For which network anomaly does Junos provide a SCREEN?
A.
a telnet to port 80
B.
a TCP packet with the SYN and ACK flags set
C.
an SNMP getnext request
D.
an ICMP packet larger than 1024 bytes
For which network anomaly does Junos provide a SCREEN?
For which network anomaly does Junos provide a SCREEN?
A.
a telnet to port 80
B.
a TCP packet with the SYN and ACK flags set
C.
an SNMP getnext request
D.
an ICMP packet larger than 1024 bytes
I think B is correct as well. Can some one advise?
You are thinking about both SYN and FIN flags set. The other one is FIN flag set and ACK flag not set. Check out page 76 of jncis sec p1 guide.
The answer is D.
JNCIS-SEC Part-1 Page 86:
CMP Abnormalities: The Defense
The Junos OS blocks any fragmented ICMP packet. In addition, the software drops ICMP packets with a length greater than 1024 bytes
Regards,
Rupin
I have the same idea. D