Cisco Exam 400-007 Topic 4 Question 46 Discussion

Actual exam question for Cisco's 400-007 exam

Question #: 46
Topic #: 4

A network hacker is trying to interrupt the transport packet on IPSEC. A packet with duplicate sequence numbers is introduced. The customer sends high-priority traffic during this window. Which design parameter should be considered to mitigate this issue?

AClassify and Mark duplicate sequence packets.

BApply anti-replay window 4096.

CRestrict keywork in IPSEC Tunnel.

DIncrease QoS shape policy.

Show Suggested Answer

Suggested Answer: B

by Holley at Aug 07, 2024, 01:33 PM

Limited Time Offer

25%

Off

Get Premium 400-007 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Dana

3 months ago

Whoa, this question is like a ninja throwing stars - gotta be on your toes! But B) is the shuriken that'll take down that packet-duplicating hacker.

upvoted 0 times

Bernardo

2 months ago

That's right, the anti-replay window will help prevent those duplicate sequence packets from causing trouble.

upvoted 0 times

...

Bernardo

2 months ago

B) Apply anti-replay window 4096.

upvoted 0 times

...

Alesia

3 months ago

C) Restrict keywork in IPSEC Tunnel? Are we playing Scrabble or trying to secure a network? B) is the obvious answer, my friend.

upvoted 0 times

Carin

3 months ago

B) Apply anti-replay window 4096.

upvoted 0 times

...

Devorah

3 months ago

A) Classify and Mark duplicate sequence packets.

upvoted 0 times

...

Remedios

3 months ago

Increasing QoS shape policy could also help prioritize traffic during such attacks.

upvoted 0 times

...

Susana

3 months ago

I believe applying anti-replay window 4096 would also be a good solution.

upvoted 0 times

...

Belen

4 months ago

I agree with Rosenda, it will help in identifying and handling those packets.

upvoted 0 times

...

Hillary

4 months ago

A) Classify and mark duplicate sequence packets? What is this, a magic trick? B) is the only option that makes sense to me.

upvoted 0 times

...

Jesus

4 months ago

D) Increase QoS shape policy? Really? That's like trying to stop a speeding train with a water gun. Anti-replay window is clearly the way to go.

upvoted 0 times

Asuncion

2 months ago

D) Increase QoS shape policy?

upvoted 0 times

...

Winfred

3 months ago

C) Restrict keywork in IPSEC Tunnel.

upvoted 0 times

...

Chara

3 months ago

B) Apply anti-replay window 4096.

upvoted 0 times

...

Roxane

3 months ago

A) Classify and Mark duplicate sequence packets.

upvoted 0 times

...

Wayne

4 months ago

Hmm, B) Apply anti-replay window 4096 seems like the right choice here. Gotta keep those packet duplicates at bay!

upvoted 0 times

Johnetta

3 months ago

Agreed, we need to prevent those packet duplicates from causing issues.

upvoted 0 times

...

Devorah

3 months ago

I think B) Apply anti-replay window 4096 is the way to go.

upvoted 0 times

...

Rosenda

4 months ago

I think we should classify and mark duplicate sequence packets.

upvoted 0 times

...