Topic: Windows Firewall Ralph is a junior network administrator at Wingtip Toys,

Question

Topic: Windows Firewall Ralph is a junior network administrator at Wingtip Toys, left in change of the IP department while everyone else is out of town at a conference. Ralph receives a call from the company's best customer, reporting that they are unable to place orders through the company's website. Ralph examines the logs for the Windows web server and notices a huge amount of incoming traffic that began that morning. Ralph suspects that the server is the target of a denial of service (DoS) attack, but he doesn't have access to the network firewall, nor does he know anything about the firewall configuration his company uses. Ralph does have access to the Windows Firewall running on the web server, however. What temporary modifications can Ralph make to Windows Firewall to block the attack and allow the customer to submit orders as they normally do?

reference:

Zacker, C. (2014). Installing & Configuring Windows Server 2012 R2 (70-410). ISBN: 9781119036098

Explanation / Answer

A denial-of-service (DoS) attack is an attack carried out in order to deny the availability of a network resource to the genuine users of the website. In the case of the above situation, Ralph was able to suspect a DoS on the basis of the windows log.

Solution:

Ralph can enable the virtual LAN identification. This can be done by checking the appropriate check box on the network adapter in every virtual machine.

He also need to specify the same VLAN identifier for each virtual machine.

Firewalls can be configured so that they have rules that allow or deny ports, IP addresses as well as protocols. If the DoS attack is coming from a few unusual IP addresses, he can create a rule to deny incoming requests from the specified IP addresses.

Related Questions

Navigate

• Browse (All)
• Browse T
• Subjects

Integrity-first tutoring: explanations and feedback only — we do not complete graded work. Learn more.