Which of the following would be the most help against Denial of Service (DOS) attacks?

You are the Administrator for a corporate network. You are concerned about denial of service attacks. Which of the following would be the most help against Denial of Service (DOS) attacks?

A.
Honey pot

B.
Network surveys.

C.
Packet filtering firewall

D.
Stateful Packet Inspection (SPI) firewall

Explanation:
A Stateful Packet Inspection firewall not only examines each packet, but the preceding and subsequent packets. This allows it to detect and block likely DOS attacks.

Answer A is incorrect. A honey pot is useful for diverting and tracking intruders who have already broken into the network. Fact What is a honey pot? Hide A honey pot is a computer that is used to attract potential intruders or attackers. It is for this reason that a honey pot has low security permissions. A honey pot is used to gain information about the intruders and their attack strategies.

Answer C is incorrect. A packet filtering firewall simply looks at each individual packet, and therefore is ineffective against most DOS attacks.

Answer B is incorrect. Network surveys can be useful in detecting rogue servers, access points, etc. but are of no use in stopping DOS attacks. You are the Administrator for a corporate network. You are concerned about denial of service attacks.