You are the security administrator for a large network. You want to prevent attackers from running any sort of traceroute into your DMZ and discovering the internal structure of publicly accessible areas of the network. How can you achieve this?
A.
There is no way to completely block tracerouting into this area
B.
Block ICMP at the firewall
C.
Block TCP at the firewall
D.
Block UDP at the firewall
Explanation:
If you create rules that prevents attackers to perform traceroutes to your DMZ then you’ll also prevent anyone from accessing the DMZ from outside the company network and in that case it is not a DMZ you have.