350-501 · Question #118
350-501 Question #118: Real Exam Question with Answer & Explanation
The correct answer is B: Router 1 is the trigger router in a RTBH implementation.. Router one is acting like a black hole: "RTBH filtering provides a method for quickly dropping undesirable traffic at the edge of the network, based on either source addresses or destination addresses by forwarding it to a null0 interface. Null0 is a pseudointerface that is alway
Question
Refer to the exhibit. An engineer is preparing to implement data plane security configuration. Which statement about this configuration is true?
Options
- ARouter 2 must configure a route to null 0 for network 192 168.1 0/24 for the RTBH implementation
- BRouter 1 is the trigger router in a RTBH implementation.
- CRouter 1 must be configured with uRPF for the RTBH implementation to be effective.
- DRouter 2 is the router receiving the DDoS attack
Explanation
Router one is acting like a black hole: "RTBH filtering provides a method for quickly dropping undesirable traffic at the edge of the network, based on either source addresses or destination addresses by forwarding it to a null0 interface. Null0 is a pseudointerface that is always up and can never forward or receive traffic. Forwarding packets to null0 is a common way to filter packets to a specific destination." nfp/prod_white_paper0900aecd80313fac.pdf
Topics
Community Discussion
No community discussion yet for this question.