300-320 · Question #220
The network designer needs to consider the number of multicast applications and sources in the network to provide the most robust network possible. Which of the following is a consideration the…
The correct answer is B. With SSM source or receiver attacks are not possible. Answer B is correct. Source-Specific Multicast (SSM) eliminates the Rendezvous Point (RP) by requiring receivers to know and explicitly join a specific (source, group) pair. Because there is no shared RP and no Shared Tree, SSM inherently prevents source spoofing attacks (a…
Question
The network designer needs to consider the number of multicast applications and sources in the network to provide the most robust network possible. Which of the following is a consideration the designer must also address?
Options
- AThe IGPs should utilize authentication to avoid being the most vulnerable component
- BWith SSM source or receiver attacks are not possible
- CWith Shared Trees access control is always applied at the RP
- DLimit the rate of Register messages to the RP to prevent specific hosts from being attacked on a
How the community answered
(52 responses)- A12% (6)
- B62% (32)
- C21% (11)
- D6% (3)
Explanation
Answer B is correct. Source-Specific Multicast (SSM) eliminates the Rendezvous Point (RP) by requiring receivers to know and explicitly join a specific (source, group) pair. Because there is no shared RP and no Shared Tree, SSM inherently prevents source spoofing attacks (a rogue source cannot inject traffic into a group stream) and receiver attacks (a receiver cannot join arbitrary groups without knowing the exact source). This makes SSM the most secure multicast model. Option A is about IGP security, which is a separate concern. Option C is incorrect - with Shared Trees (ASM), access control is not always applied at the RP; it must be explicitly configured. Option D describes rate-limiting Register messages, which is a mitigation but does not prevent host-level attacks.
Topics
Community Discussion
No community discussion yet for this question.