Which Ipv6 first-ho...
 
Notifications
Clear all

Which Ipv6 first-hop security feature helps to minimize denial of service attacks?

1 Posts
1 Users
0 Likes
223 Views
 Coy
(@millotcoy)
Noble Member
Joined: 2 years ago
Posts: 688
Topic starter  

Which Ipv6 first-hop security feature helps to minimize denial of service attacks?

  • A . IPv6 Router Advertisement Guard
  • B . IPv6 Destination Guard
  • C . DHCPv6 Guard
  • D . IPv6 MAC address filtering

Show Answer Hide Answer

Suggested Answer: B

Explanation:

The Destination Guard feature helps in minimizing denial-of-service (DoS) attacks. It performs address resolutions only for those addresses that are active on the link, and requires the FHS binding table to be populated with the help of the IPv6 snooping feature. The feature enables the filtering of IPv6 traffic based on the destination address, and blocks the NDP resolution for destination addresses that are not found in the binding table. By default, the policy drops traffic coming for an unknown destination.

Reference: https://www.cisco.com/c/en/us/td/docs/routers/7600/ios/15S/configuration/guide/7600_15_0s_boo k/IPv6_Security.pdf

   
Quote

Latest Cisco 300-410 Dumps Valid Version

Latest And Valid Q&A | Instant Download | Once Fail, Full Refund
Share: