Implementing and Operating Cisco Service Provider Network Core Technologies (SPCOR) — Question 315

Which action occurs during the traceback phase of the six-phase approach to service provider security?

Answer options

• A. Trace the attack that flows from the attacked sections of the network toward the network edges
• B. Detect unusual activity or behavior and activate appropriate measures after an alert is raised
• C. Review the whole attack-handling process
• D. Mitigate the attack that flows using various mechanisms

Correct answer: A

Explanation

The correct answer, A, describes the process of tracing the attack back to its source, which is crucial for understanding how the attack propagated. Options B, C, and D refer to other phases of the security process, such as detection and mitigation, but do not specifically address the traceback phase.