300-320 · Question #369
An engineer have to design a multicast domain for some application. This multicast network should be secured. Which option should he take ?
The correct answer is D. SSM with an addressing of 232.0.0.0/8. SSM (Source-Specific Multicast) is inherently more secure than ASM (Any-Source Multicast) because receivers must specify both the multicast group address AND the exact source IP they wish to receive from. This prevents unauthorized or spoofed sources from injecting traffic into…
Question
An engineer have to design a multicast domain for some application. This multicast network should be secured. Which option should he take ?
Options
- AASM with an addressing of 224.0.0.0/8
- BASM with an addressing of 232.0.0.0/8
- CSSM with an addressing of 224.0.0.0/8
- DSSM with an addressing of 232.0.0.0/8
How the community answered
(21 responses)- A5% (1)
- B5% (1)
- C14% (3)
- D76% (16)
Explanation
SSM (Source-Specific Multicast) is inherently more secure than ASM (Any-Source Multicast) because receivers must specify both the multicast group address AND the exact source IP they wish to receive from. This prevents unauthorized or spoofed sources from injecting traffic into the multicast stream. SSM uses the reserved address range 232.0.0.0/8 (as defined in RFC 4607). ASM uses 224.0.0.0/4 broadly, and 232.0.0.0/8 is not an ASM range - it is exclusively reserved for SSM. Therefore, a secure multicast design requires SSM with the 232.0.0.0/8 range, making D the correct answer.
Topics
Community Discussion
No community discussion yet for this question.