300-360 Question #253: Real Exam Question with Answer & Explanation

The correct answer is B: the Router Advertisement guard. IPv6 first-hop security on a WLAN is primarily achieved through the Router Advertisement (RA) Guard (B). In IPv6, hosts rely on Router Advertisements from the default gateway for address autoconfiguration (SLAAC) and routing information. Without RA Guard, a rogue device could sen

Question

You are optimizing a wireless network that is configured to support IPv6. Which setting do you use to provide first-hop security for the IPv6 clients that use the WLAN?

Options

Athe DHCPv6 Server Guard
Bthe Router Advertisement guard
Cthe IPv6 Source Guard
DRouter Advertisement throttling

Explanation

IPv6 first-hop security on a WLAN is primarily achieved through the Router Advertisement (RA) Guard (B). In IPv6, hosts rely on Router Advertisements from the default gateway for address autoconfiguration (SLAAC) and routing information. Without RA Guard, a rogue device could send forged RA messages and redirect client traffic through a malicious gateway. Enabling RA Guard on the WLC ensures that only authorized routers can send RAs to wireless clients. DHCPv6 Server Guard (A) protects against rogue DHCPv6 servers, IPv6 Source Guard (C) validates source IP-to-MAC bindings, and RA Throttling (D) limits RA frequency to reduce overhead - but RA Guard is the definitive first-hop security control for IPv6 clients.

Community Discussion

No community discussion yet for this question.

Full 300-360 Practice