350-501 · Question #118
Refer to the exhibit. An engineer is preparing to implement data plane security configuration. Which statement about this configuration is true?
The correct answer is B. Router 1 is the trigger router in a RTBH implementation. Router one is acting like a black hole: "RTBH filtering provides a method for quickly dropping undesirable traffic at the edge of the network, based on either source addresses or destination addresses by forwarding it to a null0 interface. Null0 is a pseudointerface that is…
Question
Refer to the exhibit. An engineer is preparing to implement data plane security configuration. Which statement about this configuration is true?
Exhibit
Options
- ARouter 2 must configure a route to null 0 for network 192 168.1 0/24 for the RTBH implementation
- BRouter 1 is the trigger router in a RTBH implementation.
- CRouter 1 must be configured with uRPF for the RTBH implementation to be effective.
- DRouter 2 is the router receiving the DDoS attack
How the community answered
(32 responses)- A6% (2)
- B88% (28)
- C3% (1)
- D3% (1)
Explanation
Router one is acting like a black hole: "RTBH filtering provides a method for quickly dropping undesirable traffic at the edge of the network, based on either source addresses or destination addresses by forwarding it to a null0 interface. Null0 is a pseudointerface that is always up and can never forward or receive traffic. Forwarding packets to null0 is a common way to filter packets to a specific destination." nfp/prod_white_paper0900aecd80313fac.pdf
Topics
Community Discussion
No community discussion yet for this question.