you set the SEC_PROTOCOL_ERROR_FURTHER_ACTION initialization parameter as follows:
SQL>ALTER SYSTEM SET SEC_PROTOCOL_ERROR_FURTHER_ACTION = Drop,10;
What is the significance of this setting?
A. It terminates the client connection after 10 bad packets and the client cannot reconnect to the same instance.
B. It terminates the client connection after 10 bad packets but the client can still reconnect,and attempt the same operation again.
C. It terminates the client connection 10 seconds after receiving a bad packet and the client cannot reconnect to the same instance.
D. It terminates the client connection after receiving a bad packet and the client can reconnect to the same instance after 10 minutes.
答案:(B)
解析:
初始化参数:SEC_PROTOCOL_ERROR_FURTHER_ACTION = {CONTINUE | (DELAY, integer) | (DROP, integer)}
CONTINUE--服务器进程继续执行, database server可能从属于Denial of Service(DoS), 如果恶意的客户端继续发bad packets
(DELAY, integer)--服务器端再次接收同一客户端的下次连接请求时,客户端要经过integer秒.
可以防止恶意的客户端消耗过多的服务器端资源,而造成合法的客户端性能下降
(DROP, integer)--服务器端在累计达到integer个bad packets后强制终断客户端连接.
服务器在客户端的消耗上保护自己.客户端可以重新连接产尝试相同的操作.