nerdexam
Cisco

350-501 · Question #233

An engineer working for a private telecommunication company with an employee id: 3948:11:613 needs to limit the malicious traffic on their network. Which configuration must the engineer use to impleme

The correct answer is A. router(config)# interface gigabitethernet0/1 router(config-if)# ip address 192.168.200.1 255.255.255.0 router(config-if)# ip verify address unicast source reachable-via any router(config-if)# ipv6 address 2001:DB8:1::1/96 router(config-if)# ipv6 verify unicast source reachable-via any. "reachable-via any" must be configured for Loose mode on both IPv4 & IPv6. urpf-xe-3s-book/sec-unicast-rpf-loose-mode.html

Networking

Question

An engineer working for a private telecommunication company with an employee id: 3948:11:613 needs to limit the malicious traffic on their network. Which configuration must the engineer use to implement URPF loose mode on the GigabitEthernet0/1 interface? A. B. C. D.

Exhibit

350-501 question #233 exhibit

Options

  • Arouter(config)# interface gigabitethernet0/1 router(config-if)# ip address 192.168.200.1 255.255.255.0 router(config-if)# ip verify address unicast source reachable-via any router(config-if)# ipv6 address 2001:DB8:1::1/96 router(config-if)# ipv6 verify unicast source reachable-via any
  • Brouter(config)# interface gigabitethernet0/1 router(config-if)# ip address 192.168.200.1 255.255.255.0 router(config-if)# ip verify unicast source reachable-via any router(config-if)# ipv6 address 2001:DB8:1::1/96 router(config-if)# ipv6 verify unicast source reachable-via rx
  • Crouter(config)# interface gigabitethernet0/1 router(config-if)# ip address 192.168.200.1 255.255.255.0 router(config-if)# ip verify unicast source reachable-via rx router(config-if)# ipv6 address 2001:DB8:1::1/96 router(config-if)# ipv6 verify unicast source reachable-via any
  • Drouter(config)# interface gigabitethernet0/1 router(config-if)# ip address 192.168.200.1 255.255.255.0 router(config-if)# ip verify unicast source reachable-via rx router(config-if)# ipv6 address 2001:DB8:1::1/96 router(config-if)# ipv6 verify unicast source reachable-via rx

How the community answered

(28 responses)
  • A
    93% (26)
  • B
    4% (1)
  • C
    4% (1)

Explanation

"reachable-via any" must be configured for Loose mode on both IPv4 & IPv6. urpf-xe-3s-book/sec-unicast-rpf-loose-mode.html

Topics

#URPF#Network Security#Interface Configuration#Traffic Filtering

Community Discussion

No community discussion yet for this question.

Full 350-501 Practice