Q1) A network has a public web server having an IP address of 137.154.151.12 and the web server is connected to the Internet for Internet users to use. Describe or list four relevant parameter values in the packets that an attacker on the Internet uses to launch a TCP SYN Flood attack on the server.

The attacker uses IP addresses from the network where the web server is for IP spoofing in the attacking packets. The network has a perimeter firewall. Describe, in one sentence, how the firewall can be configured to block completely the attacking packets, without affecting other normal network traffic.

Q2) Shown below is a block diagram of the format of an IP packet.

IP Header IP Payload