Home » Cisco » 350-080 » What is this type of spoofing called?
Refer to the exhibit.
In the figure, the load balancer acts a transparent TCP proxy, and establishes the connection with the client on behalf of the real server. What is this type of spoofing called?
A. delayed binding
B. software-based load balancing
C. transport proxy
D. application binding
Correct Answer: A
Explanation/Reference:
Explanation:
When it establishes a Layer 5 flow, a CSS “spoofs” the back-end TCP connection by acting as a proxy for the destination device (server) for the client SYN. In other words, the CSS responds to the client SYN with a SYN/ACK before the CSS sets up the back-end TCP connection with the server.
This process is referred to as delayed binding. Delayed binding causes the client to respond with an ACK and an HTTP GET request. This process allows the CSS to gather the information it needs to select the best service (a server port where content resides or an application running on a server such as FTP) for the content request.
Reference: http://www.cisco.com/web/about/security/intelligence/dns-bcp.html
