A network engineer must reduce the security risks on a BGP network. Which option helps to avoid rogue route injection, unwanted peering, and malicious BGP activities?

Question

Options

• AApply route maps and policies in route redistribution events.
• BApply MD5 authentication between all BGP peers.
• CEncrypt all traffic with IPsec between neighbors.
• DUse GRE tunnels between all BGP peers.

• A
  4% (1)
• B
  87% (20)
• C
  9% (2)

Explanation

MD5 authentication between BGP peers is the standard method to prevent rogue route injection, unwanted peering, and malicious BGP activity. It requires that both neighbors share a pre-configured secret key; any BGP TCP segment without a valid MD5 hash is dropped, so unauthorized devices cannot establish a BGP session or inject routes. Option A (route maps) controls which routes are accepted or advertised but does not prevent an unauthorized peer from forming a session in the first place. Option C (IPsec) encrypts traffic but adds complexity and does not natively authenticate the BGP control plane the way MD5 does. Option D (GRE tunnels) provides encapsulation but not BGP peer authentication.

No community discussion yet for this question.