Which statement is true regarding the security of IPv6?

Question

Options

• AIPsec is an integrated part of IPv6 and, therefore, all IP-related security threats are eliminated when
• BExisting IPv4 firewalls can secure IPv6 traffic if IPv6 is tunneled over IPv4.
• CExisting IPv4 firewalls can secure IPv6 traffic unless IPv6 is tunneled over IPv4.
• DEndpoints that tunnel IPv6 over IPv4 can traverse firewalls without inspection of the IPv6 traffic.

• A
  16% (5)
• B
  3% (1)
• C
  6% (2)
• D
  75% (24)

Explanation

D is correct because when IPv6 is encapsulated (tunneled) inside IPv4 packets, a traditional IPv4 firewall only inspects the outer IPv4 header - the inner IPv6 payload is invisible to it. This allows malicious IPv6 traffic to pass through firewall rules unchecked, which is a well-known security gap with IPv6 transition technologies like Teredo and 6to4.

Why the others are wrong:

• A is a common trap: while IPsec is indeed mandatory/integrated in IPv6 (unlike IPv4 where it's optional), that does not eliminate all IP-related threats - IPsec still requires proper configuration and doesn't protect against every attack vector (e.g., DoS, routing attacks).
• B reverses the truth - IPv4 firewalls cannot secure tunneled IPv6 traffic precisely because they can't see inside the tunnel; that's the vulnerability, not a protection.
• C is close to the right idea but inverted - IPv4 firewalls struggle to inspect IPv6 traffic in general, and the tunneled case is where they fail most critically, not least.

Memory tip: Picture IPv6 wearing an IPv4 "disguise" - the firewall only checks the costume, not who's underneath. The tunnel hides the real traffic, letting it waltz right through.

No community discussion yet for this question.