350-501 · Question #521
Refer to the exhibit. Two midsize service providers are connected to each other and share VPNv4 routes. The service providers support customers in several geographic regions. The two network…
The correct answer is D. Implement RTBH filtering to black-hole unwanted traffic to a null interface. Remote Triggered Black Hole (RTBH) filtering is an efficient mechanism used to protect networks against data plane attacks, such as DDoS. It works by blackholing unwanted traffic at the edge of the network, preventing it from reaching the core. This ensures traffic from…
Question
Refer to the exhibit. Two midsize service providers are connected to each other and share VPNv4 routes. The service providers support customers in several geographic regions. The two network- engineering teams have decided to protect against data plane attacks and secure traffic between the two providers. Which task should toe teams perform as part of toe configuration?
Exhibit
Options
- AImplement uRPF to match source IP addresses to the routing table
- BImplement control plane policing to prevent unwanted hosts from accessing the network.
- CImplement prefix lists to allow traffic only from known sources
- DImplement RTBH filtering to black-hole unwanted traffic to a null interface
How the community answered
(29 responses)- A3% (1)
- B3% (1)
- C10% (3)
- D83% (24)
Explanation
Remote Triggered Black Hole (RTBH) filtering is an efficient mechanism used to protect networks against data plane attacks, such as DDoS. It works by blackholing unwanted traffic at the edge of the network, preventing it from reaching the core. This ensures traffic from malicious sources is dropped without affecting legitimate traffic. In this scenario, where two service providers are sharing VPNv4 routes, RTBH filtering would effectively secure the data plane and protect against unwanted or malicious traffic.
Topics
Community Discussion
No community discussion yet for this question.