H12-891_V1.0 · Question #543
BGP authentication can prevent illegal routers from establishing neighbors with BGP routers. BGP authentication can be divided into MD5 authentication and Keychain authentication. Which of the…
The correct answer is A. Notification B. Open C. Update D. Keepalive. BGP Keychain authentication is applied to all four BGP message types - Open, Update, Notification, and Keepalive - because it authenticates every packet exchanged between BGP peers throughout the entire session lifecycle, not just during session establishment. This is a key…
Question
BGP authentication can prevent illegal routers from establishing neighbors with BGP routers. BGP authentication can be divided into MD5 authentication and Keychain authentication. Which of the following packets will carry BGP Keychain authentication information? (Multiple choice)
Options
- ANotification
- BOpen
- CUpdate
- DKeepalive
How the community answered
(57 responses)- A100% (57)
Explanation
BGP Keychain authentication is applied to all four BGP message types - Open, Update, Notification, and Keepalive - because it authenticates every packet exchanged between BGP peers throughout the entire session lifecycle, not just during session establishment. This is a key distinction from some authentication models: Open carries the initial neighbor handshake, Update carries routing information, Keepalive maintains the session, and Notification signals errors - all of these must be trusted to prevent a malicious router from injecting false data at any stage. Since there are no incorrect options here, the exam is specifically testing whether candidates know that Keychain authentication is comprehensive (all packets), unlike simpler schemes that might only authenticate the Open message. A helpful memory tip: think of Keychain as a chain of trust - every link (packet) in the BGP conversation must be authenticated, so no message type is left unprotected.
Topics
Community Discussion
No community discussion yet for this question.