ISC Exam Questions

Which of the following is a reasonable response from the intrusion detection system when it detects

Which of the following is a reasonable response from the intrusion detection system when it
detects Internet Protocol (IP) packets where the IP source address is the same as the IP
destination address?

A.
Allow the packet to be processed by the network and record the event.

B.
Record selected information about the item and delete the packet.

C.
Resolve the destination address and process the packet.

D.
Translate the source address and resend the packet.

Explanation:
RFC 1918 and RFC 2827 state about private addressing and ip spoofing using the
same source address as destination address. Drop the packet.