Certified SOC Analyst (CSA) — Question 89

Which of the following technique protects from flooding attacks originated from the valid prefixes (IP addresses) so that they can be traced to its true source?

Answer options

• A. Rate Limiting
• B. Egress Filtering
• C. Ingress Filtering
• D. Throttling

Correct answer: C

Explanation

Ingress Filtering is effective because it allows the network to verify that incoming packets are from legitimate sources, which helps identify and mitigate flooding attacks. Rate Limiting and Throttling manage the volume of traffic but do not specifically address the source verification aspect. Egress Filtering focuses on traffic leaving the network and does not provide protection against incoming flooding attacks.