Discuss Cisco 300-410 Exam Topic 6 Question 120

Which configuration feature should be used to block rogue router advertisements instead of using the IPv6 Router Advertisement Guard feature?

AVACL blocking broadcast frames from nonauthorized hosts

BPVLANs with promiscuous ports associated to route advertisements and isolated ports for nodes

CPVLANs with community ports associated to route advertisements and isolated ports for nodes

DIPv4 ACL blocking route advertisements from nonauthorized hosts

Suggested Answer: B

The IPv6 Router Advertisement Guard feature provides support for allowing the network administrator to block or reject unwanted or rogue router advertisement guard messages that arrive at the network device platform. Router Advertisements are used by devices to announce themselves on the link. The IPv6 Router Advertisement Guard feature analyzes these router advertisements and filters out router advertisements that are sent by unauthorized devices.

Certain switch platforms can already implement some level of rogue RA filtering by the administrator configuring Access Control Lists (ACLs) that block RA ICMP messages that might be inbound on ''user'' ports.

Get Premium 300-410 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

26 comments · newest first

Geoffrey 6 months ago

I agree with Katlyn. Blocking rogue ads is crucial for security!

Tina 6 months ago

Option D seems outdated. IPv4 ACLs won't help with IPv6 issues.

Ashlyn 6 months ago

I feel like option C could work too, but I'm not sure about community ports.

Katlyn 6 months ago

I think option B is the best choice. It isolates nodes effectively.

Karma 6 months ago

PVLANs are definitely the way to go here.

Vernell 6 months ago

Surprised this isn't more straightforward!

Darrel 7 months ago

Wait, isn't D also a valid option?

Joanne 7 months ago

Definitely agree with that!

Fabiola 7 months ago

I think option C is the right choice.

Kimbery 7 months ago

Option C is the way to go, for sure. Gotta love those isolated ports for the nodes. Keeps everything nice and tidy.

Merilyn 7 months ago

Haha, A? Really? Blocking broadcast frames? That's like trying to stop a freight train with a toothpick.

Aja 8 months ago

D is the obvious answer here. IPv4 ACLs are the way to block those pesky router ads. Simple and effective.

Antonette 8 months ago

I'm torn between B and C, but I think C might be the better choice. Gotta keep those community ports secure, you know?

Billi 8 months ago

Option B looks like the way to go. Blocking rogue router ads with PVLANs sounds like a solid plan.

Dulce 8 months ago

I feel like I should know this, but I keep mixing up the different types of ACLs and their applications. Is it really about blocking unauthorized hosts?

Truman 9 months ago

I’m leaning towards option C, but I’m not entirely confident. I recall something about community ports being used for specific traffic types.

Alona 9 months ago

This question feels similar to one we practiced on rogue DHCP servers. I wonder if the answer is related to how we isolate ports in PVLANs.

Louis 9 months ago

I think I remember something about using PVLANs, but I'm not sure if it's community or promiscuous ports that are relevant here.

Deandrea 9 months ago

I've got a good feeling about this one. The key is understanding how the different VLAN and ACL configurations can be used to mitigate rogue router advertisements.

Adelle 9 months ago

This looks like it's testing our knowledge of IPv6 security features. I'm going to review the details of each option and try to eliminate the ones that don't directly address rogue router advertisements.

Jenise 10 months ago

I'm a bit confused by the wording of this question. Can someone clarify the difference between the IPv6 Router Advertisement Guard and the other choices?

Paris 10 months ago

Okay, I remember learning about PVLAN configurations for securing router advertisements. I think option C might be the way to go here.

Delfina 10 months ago

Hmm, this seems like a tricky one. I'll need to think carefully about the differences between the IPv6 Router Advertisement Guard feature and the other options.

Elli 4 months ago

↳ replying to Delfina

Option C might be the best choice for isolating nodes.

Floyd 4 months ago

↳ replying to Delfina

I’m leaning towards option A. Seems straightforward.

Jennifer 5 months ago

↳ replying to Delfina

I think option B sounds interesting.

Cisco 300-410 Exam - Topic 6 Question 120 Discussion