Which statement best describes the DOS monitoring guidance?

• A. The switch should detect a DOS attack.
• B. Verify that no DOS attack has been detected.
• C. DOS statistics are not meaningful.
• D. DOS attacks should be reported to the user.

Answer: (B)

DOS monitoring is about confirming normal operation by checking for signs of Denial of Service and establishing whether an attack has been detected. The best description is to verify that no DOS attack has been detected because the purpose of monitoring is to ensure the environment is clean and functioning, and to flag only if evidence of an attack appears.

Thinking about the other options, the monitoring guidance isn’t stating that the device must always detect a DOS attack; detection capability matters, but the guidance emphasizes confirming absence so normal service can continue. DOS statistics are indeed meaningful for understanding traffic patterns and incidents, so saying they’re not meaningful isn’t accurate. And alerts typically go to administrators or security systems rather than end users, so reporting attacks to the user doesn’t align with standard monitoring practices.