nerdexam
Cisco

350-601 · Question #703

Refer to the exhibit. An engineer must configure NX-1 to accept only packets that exist in the routing table with the 9.9.9.2/32 source IP address and that are reachable via interface Eth 1/1. Which…

The correct answer is D. interface Eth1/1 with rx keyword. The rx keyword on ip verify unicast source enforces that only packets received on Eth1/1 with source IP addresses that are valid and reachable via the routing table through Eth1/1 will be accepted. This meets the requirement to only accept packets sourced from 9.9.9.2/32 via…

Network

Question

Refer to the exhibit. An engineer must configure NX-1 to accept only packets that exist in the routing table with the 9.9.9.2/32 source IP address and that are reachable via interface Eth 1/1. Which attribute to the ip verify unicast source command is needed to meet these requirements?

Exhibit

350-601 question #703 exhibit

Options

  • Ainterface Eth1/1 with allow-default keyword
  • Binterface Eth1/2 with rx keyword
  • Cinterface Eth1/2 with allow-default keyword
  • Dinterface Eth1/1 with rx keyword

How the community answered

(62 responses)
  • A
    5% (3)
  • B
    8% (5)
  • C
    15% (9)
  • D
    73% (45)

Explanation

The rx keyword on ip verify unicast source enforces that only packets received on Eth1/1 with source IP addresses that are valid and reachable via the routing table through Eth1/1 will be accepted. This meets the requirement to only accept packets sourced from 9.9.9.2/32 via Eth1/1.

Topics

#uRPF#Network Security#Packet Filtering#Cisco NX-OS

Community Discussion

No community discussion yet for this question.

Full 350-601 Practice