400-007: Cisco Certified Design ExpertDemo

By Cisco · Question Mode

QuestionQ106

Network Design

Drag the design characteristics on the left to the appropriate network-filtering techniques on the right. Not every option is used.

Drag & Drop
It is used to prevent spoofing attacks when there are alternate routes to a given IP address
It is used to check the existence of a route without regard to the incoming interface
It is a dynamic filter
It requires manual configuration
It is used as a filtering technique for Martian IP addresses
Ingress Access Lists
Strict Reverse Path Forwarding
Feasible Path Reverse Path Forwarding
Loose Reverse Path Forwarding
Explanation

Ingress ACLs are static rules that require manual configuration. Strict RPF dynamically checks that the best reverse path matches the receiving interface. Feasible-path RPF accommodates alternate feasible routes while providing anti-spoofing protection. Loose RPF accepts traffic when any route to the source exists, irrespective of the interface on which it arrived.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!