Cisco
352-001 · Question #375
352-001 Question #375: Real Exam Question with Answer & Explanation
The correct answer is B: limits IPv6 route advertisement in the network. IPv6 First-Hop Security (FHS) provides Layer 2 mechanisms including RA Guard, ND Inspection, and DHCPv6 Guard to protect against common IPv6 network attacks.
Question
Which three options are important functions of IPv6 first-hop security? (Choose three.)
Options
- Aimplements a broadcast-control mechanism
- Blimits IPv6 route advertisement in the network
- Csuppresses excessive multicast neighbor discovery
- Dprevents IPv6 packet fragmentation
- Eprevents rogue DHCP servers from assigning IPv6 addresses
Explanation
IPv6 First-Hop Security (FHS) provides Layer 2 mechanisms including RA Guard, ND Inspection, and DHCPv6 Guard to protect against common IPv6 network attacks.
Common mistakes.
- A. IPv6 replaced broadcasts entirely with multicast and anycast, so there is no broadcast mechanism to control and FHS provides no such function.
- D. IPv6 mandates that only source hosts perform fragmentation, not intermediate routers, and FHS does not include any feature to prevent packet fragmentation.
Concept tested. IPv6 First-Hop Security feature identification
Community Discussion
No community discussion yet for this question.