Juniper
JN0-1331 · Question #44
You are designing a DDoS solution for an ISP using BGP FlowSpec. You want to ensure that BGP FlowSpec does not overwhelm the ISP's edge routers. Which two requirements should be included in your…
The correct answer is C. Implement a route policy to limit advertised routes to any public IP space D. Specify a maximum number of BGP FlowSpec prefixes per device. See the full explanation below for the reasoning.
Question
You are designing a DDoS solution for an ISP using BGP FlowSpec. You want to ensure that BGP FlowSpec does not overwhelm the ISP's edge routers. Which two requirements should be included in your design? (Choose two.)
Options
- ASpecify a maximum number BGP FlowSpec prefixes per neighbor
- BImplement a route policy to limit advertised routes to /24 subnets
- CImplement a route policy to limit advertised routes to any public IP space
- DSpecify a maximum number of BGP FlowSpec prefixes per device
How the community answered
(28 responses)- A18% (5)
- B7% (2)
- C75% (21)
Community Discussion
No community discussion yet for this question.