EC-Council Certified SOC Analyst (CSA) Practice Exam 2026 – Comprehensive Prep

The technique that effectively protects against flooding attacks from valid prefixes to trace their true source is ingress filtering. This method is implemented at the point where data packets enter a network. Ingress filtering helps to ensure that only legitimate traffic is allowed into the network by verifying the source IP addresses of incoming packets against routing tables or the expected network prefixes.

By employing ingress filtering, organizations can mitigate the risk of flooding attacks that might use valid prefixes, as the technique allows you to drop packets that originate from outside the acceptable range of network addresses. This capability is crucial in preventing attackers from using falsified or malicious traffic to hide their true source, making it challenging for them to launch attacks without being accountable for their activities.

When considering the other options, rate limiting controls the amount of traffic sent to a network resource but does not specifically address the source validation aspect. Egress filtering deals with the outbound traffic from the network, aiming to block unwanted or malicious data from leaving but does not necessarily prevent incoming flooding attacks. Throttling refers to the deliberate slowing down of data transmission to manage network load, rather than filtering traffic based on its source.