— Exhibit —
ssg5-> get conf | include syn
set zone untrust screen syn-flood attack-threshold 625
set zone untrust screen syn-flood alarm-threshold 250
set zone untrust screen syn-flood timeout 20
set zone untrust screen syn-flood queue-size 1000
set zone untrust screen syn-flood
set flow syn-proxy syn-cookie
— Exhibit —
A host in the untrust zone sends 1000 SYN packets in a single second to a host in your trust zone
destined for port 80.
Referring to the exhibit, which statement describes the behavior of the ScreenOS device?
A.
It will maintain this state for all 1000 connection attempts.
B.
It will begin to drop the SYN packets.
C.
It will block further connection attempts from this host for 20 seconds.
D.
It will reply with SYN-ACK packets.