Which two statements are true about Unicast Reverse Path Forwarding Loose Mode? (Choose two.)

The correct answer is A. It is used in multihome network scenarios. B. It can be used with BGP to mitigate DoS and DDoS. The Unicast Reverse Path Forwarding Loose Mode feature creates a new option for Unicast Reverse Path Forwarding (Unicast RPF), providing a scalable anti-spoofing mechanism suitable for use in multihome network scenarios. This mechanism is especially relevant for Internet…

Security

Question

Options

AIt is used in multihome network scenarios.
BIt can be used with BGP to mitigate DoS and DDoS.
CIt does not need to have CEF enabled.
DIt is enabled via the interface level command ip verify unicast reverse-path.
EIt cannot be used with "classification" access lists.

How the community answered

(21 responses)

A
76% (16)
C
5% (1)
D
5% (1)
E
14% (3)

Explanation

The Unicast Reverse Path Forwarding Loose Mode feature creates a new option for Unicast Reverse Path Forwarding (Unicast RPF), providing a scalable anti-spoofing mechanism suitable for use in multihome network scenarios. This mechanism is especially relevant for Internet Service Providers (ISPs), specifically on routers that have multiple links to multiple ISPs. In addition, Unicast RPF (strict or loose mode), when used in conjunction with a Border Gateway Protocol (BGP) "trigger, " provides an excellent quick reaction mechanism that allows network traffic to be dropped on the basis of either the source or destination IP address, giving network administrators an efficient tool for mitigating denial of service (DoS) and distributed denial of service (DDoS) attacks.

Topics

#uRPF Loose Mode#DoS mitigation#CEF#multihome networks

Community Discussion

No community discussion yet for this question.

Full 350-001 Practice