nerdexam
CiscoCisco

350-501 · Question #455

350-501 Question #455: Real Exam Question with Answer & Explanation

Sign in or unlock 350-501 to reveal the answer and full explanation for question #455. The question stem and answer options stay visible for context.

Networking

Question

Refer to the exhibit. A network engineer must deny access from spoofed addresses to the LAN. The edge router currently has two active BGP sessions established with Tier 1 ISP_A. Due to asymmetric routing, no ACL is configured on either interface. Which two configurations must the engineer perform on the edge router to complete the task? (Choose two.)

Options

  • Aip verify unicast source reachable-via tx under FA0/0
  • Bip verify unicast source reachable-via under FA0/1
  • Cip verify unicast source reachable-via any under FA0/1
  • Dip verify unicast source reachable-via both under FA0/0
  • Eip verify unicast source reachable-via any under FA0/0

Unlock 350-501 to see the answer

You've previewed enough free 350-501 questions. Unlock 350-501 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Topics

#uRPF#IP Spoofing Protection#Edge Router Security#Network Hardening
Full 350-501 PracticeBrowse All 350-501 Questions