Certified Incident Handler (ECIH v3) — Question 82

The network perimeter should be configured in such a way that it denies all incoming and outgoing traffic/ services that are not required. Which service listed below, if blocked, can help in preventing Denial of Service attack?

Answer options

• A. SAM service
• B. POP3 service
• C. SMTP service
• D. Echo service

Correct answer: D

Explanation

Blocking the Echo service can prevent Denial of Service attacks as it is often exploited in amplification attacks, increasing the volume of traffic directed at a target. The SAM, POP3, and SMTP services are not typically associated with such vulnerabilities and do not provide the same level of mitigation against Denial of Service attacks as the Echo service does.