Crucial Exams

Certified Ethical Hacker (CEH) Practice Question

An ecommerce company's 1 Gbps internet uplink is being saturated by a 200 Gbps UDP amplification attack. Their edge routers support BGP and can advertise their /24 prefix to external peers, but they have no on-premise hardware capable of filtering hundreds of gigabits. Which mitigation approach will restore availability fastest while keeping legitimate traffic flowing?

  • Apply connection-rate limiting rules with iptables on every web server in the pool

  • Trigger a discard route using RTBH so upstream routers drop all packets to the /24

  • Announce the /24 via BGP to a cloud-based scrubbing center that tunnels back only filtered traffic

  • Activate TCP SYN cookies on the perimeter firewalls handling the site

Certified Ethical Hacker (CEH)
Network and Perimeter Hacking
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Wipe Score
Bash, the Crucial Exams Chat Bot
AI Bot