Which mechanisms are present in IPv6 to secure the link layer? (Select two.)

The correct answer is A. SEND B. CGA. SEND (Secure Neighbor Discovery, RFC 3971) (A) secures the IPv6 Neighbor Discovery Protocol (NDP) at the link layer by adding cryptographic protection to Router Advertisements, Neighbor Solicitations, and Neighbor Advertisements, preventing attacks like rogue RA injection and…

Advanced Addressing and Routing Solutions

Question

Options

ASEND
BCGA
CRA
DPMUTD
EPMUTD

How the community answered

(30 responses)

A
93% (28)
C
3% (1)
E
3% (1)

Explanation

SEND (Secure Neighbor Discovery, RFC 3971) (A) secures the IPv6 Neighbor Discovery Protocol (NDP) at the link layer by adding cryptographic protection to Router Advertisements, Neighbor Solicitations, and Neighbor Advertisements, preventing attacks like rogue RA injection and neighbor cache poisoning. CGA (Cryptographically Generated Addresses, RFC 3972) (B) is tightly coupled with SEND and binds a public key to an IPv6 interface identifier cryptographically, preventing address spoofing at the link layer. Together, SEND and CGA form IPv6's primary link-layer security mechanism. RA (C) is Router Advertisement, a standard NDP message that SEND is designed to protect against abuse - it is not itself a security mechanism. PMUTD (D and E, listed twice - likely a question error) does not correspond to a recognized IPv6 link-layer security standard.

Topics

#SEND#CGA#IPv6 link security#Neighbor Discovery

Community Discussion

No community discussion yet for this question.

Full 300-320 Practice