Which technique helps identify the true source of an attack and take necessary steps to block further attacks?

Which technique helps identify the true source of an attack and take necessary steps to block further attacks?

• A. Packet Traceback
• B. Rate limiting
• C. KFSensor
• D. Load Balancing

Answer: (A)

Focusing on identifying where an attack truly originates, packet traceback is the technique that reconstructs the route attack traffic has taken through the network to reveal the real source. Attack traffic is often spoofed, so simply looking at what the target sees isn’t enough; traceback methods use router markings or logs across the path to piece together the origin, sometimes across multiple autonomous systems. Once you pinpoint the true source, you can coordinate with upstream providers or apply filtering closer to the source to block further attempts. Rate limiting slows or throttles traffic but doesn’t reveal who is attacking. KFSensor is a honeypot/IDS that helps detect and studyattack activity, not primarily to locate the actual attacker. Load balancing spreads traffic to multiple servers, which helps availability and performance but has no role in tracing back to the attacker. Packet traceback is the most appropriate choice for identifying the true origin and taking steps to block further attacks.

Focusing on identifying where an attack truly originates, packet traceback is the technique that reconstructs the route attack traffic has taken through the network to reveal the real source. Attack traffic is often spoofed, so simply looking at what the target sees isn’t enough; traceback methods use router markings or logs across the path to piece together the origin, sometimes across multiple autonomous systems. Once you pinpoint the true source, you can coordinate with upstream providers or apply filtering closer to the source to block further attempts.

Rate limiting slows or throttles traffic but doesn’t reveal who is attacking. KFSensor is a honeypot/IDS that helps detect and studyattack activity, not primarily to locate the actual attacker. Load balancing spreads traffic to multiple servers, which helps availability and performance but has no role in tracing back to the attacker. Packet traceback is the most appropriate choice for identifying the true origin and taking steps to block further attacks.