ExamTopics Logo
Mail Us[email protected]
Menu
Cisco Discussions
exam questions

Exam 400-007 All Questions

View all questions & answers for the 400-007 exam
Go to Exam

Exam 400-007 topic 1 question 238 discussion

Actual exam question from Cisco's 400-007
Question #: 238
Topic #: 1
[All 400-007 Questions]

A network hacker is trying to interrupt the transport packet on IPSEC. A packet with duplicate sequence numbers is introduced. The customer sends high-priority traffic during this window. Which design parameter should be considered to mitigate this issue?

  • A. Classify and Mark duplicate sequence packets.
  • B. Apply anti-replay window 4096.
  • C. Restrict keywork in IPSEC Tunnel.
  • D. Increase QoS shape policy.
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️
by Seawanderer at May 29, 2024, 1:21 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
Seawanderer
6 months, 1 week ago
Selected Answer: B
The anti-replay window is a feature in IPSEC that helps protect against replay attacks, where an attacker sends duplicate packets to disrupt the communication. By configuring a larger anti-replay window (such as 4096), the system can more effectively detect and discard duplicate or out-of-sequence packets, thus maintaining the integrity of the high-priority traffic.
upvoted 4 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel