Anti-spoofing is not needed when IPS software blade is enabled
B.
It is more secure to create anti-spoofing groups manually
C.
It is BEST Practice to have anti-spoofing groups in sync with the routing table
D.
With dynamic routing enabled, anti-spoofing groups are updated automatically whenever there is a routing change
The Answer Is:
C
This question includes an explanation.
Explanation:
The statement that is TRUE of anti-spoofing is that it is BEST Practice to have anti-spoofing groups in sync with the routing table. Anti-spoofing prevents attackers from sending packets with a false source IP address. Anti-spoofing groups define which IP addresses are expected on each interface of the Security Gateway. If the routing table changes, the anti-spoofing groups should be updated accordingly34. References: Check Point R81 ClusterXL Administration Guide, Network Defined by Routes: Anti-Spoofing
156-215.81 PDF/Engine
Printable Format
Value of Money
100% Pass Assurance
Verified Answers
Researched by Industry Experts
Based on Real Exams Scenarios
100% Real Questions
Get 60% Discount on All Products,
Use Coupon: "8w52ceb345"