Which of the following control measures can help James?

James wants to implement certain control measures to prevent denial-of-service attacks against the organization.

Which of the following control measures can help James?
A . Strong passwords
B . Reduce the sessions time-out duration for the connection attempts
C . A honeypot in DMZ
D . Provide network-based anti-virus

View Answer

Answer: C

Explanation:

Implementing a honeypot in the Demilitarized Zone (DMZ) can be an effective control measure against denial-of-service (DoS) attacks. A honeypot is a decoy system designed to attract attackers and divert them from legitimate targets. By deploying a honeypot in the DMZ, James can monitor and analyze incoming traffic to identify and mitigate DoS attacks. This proactive security measure allows the organization to detect and respond to malicious activities before they impact critical systems and services.

Reference: The Certified Network Defender (CND) course by EC-Council includes strategies for defending against DoS attacks, which cover the use of honeypots as a part of a layered security approach1. Additionally, industry best practices suggest that honeypots can serve as an early warning system and a means to study attacker behavior, which aligns with the objectives of the CND curriculum2.