QuestionQ77

Security Design

Company XYZ is designing its network for IPv6 security and has the following design requirements:

  • A switch or router must deny traffic from sources whose addresses are valid but topologically incorrect.
  • Devices must block Neighbor Discovery Protocol resolutions for destination addresses not present in the binding table.

Which two IPv6 security features are recommended for this company?

Choose two
  • A IPv6 RA Guard
  • B IPv6 Destination Guard
  • C IPv6 Prefix Guard
  • D IPv6 Source Guard
  • E IPv6 DHCP Guard
Explanation

IPv6 Prefix Guard denies traffic originating from non-topologically correct addresses. IPv6 Destination Guard works with Neighbor Discovery and blocks address resolution when the destination is not in the binding table.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!