Cisco 350-501 Exam - Topic 4 Question 85 Discussion

Actual exam question for Cisco's 350-501 exam

Question #: 85
Topic #: 4

Refer to the exihibit.

Refer to the exhibit. A large enterprise has multiple branch offices that span several geographic regions. The enterprise runs MPLS within the core to propagate VPNv4 routes using BGP. After a recent series of DDoS attacks disrupted the network, a network engineer has been asked to reconfigure BGP to help mitigate future attacks. Which configuration must the engineer apply?

AOption A

BOption B

COption C

DOption D

Show Suggested Answer

Suggested Answer: B

To mitigate DDoS attacks in a BGP environment, an engineer can apply BGP FlowSpec, which allows for the creation of traffic filtering policies that can be distributed across the network.This configuration enables the network to respond quickly to DDoS attacks by filtering or redirecting malicious traffic based on predefined criteria, such as source IP, destination IP, and port numbers456.

by Daron at Apr 24, 2024, 09:40 PM

Limited Time Offer

25%

Off

Get Premium 350-501 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Verdell

9 months ago

I heard D is the least effective option.

upvoted 0 times

...

Cristina

9 months ago

Definitely leaning towards Option A.

upvoted 0 times

...

James

10 months ago

Wait, are we sure any of these will actually help?

upvoted 0 times

...

Roselle

10 months ago

I think Option C might be better, though.

upvoted 0 times

...

Carmela

10 months ago

Option B looks solid for DDoS mitigation.

upvoted 0 times

...

Shonda

10 months ago

I'm a bit confused about the differences between options A and D. They both seem to have some valid points for BGP adjustments.

upvoted 0 times

...

Galen

11 months ago

I practiced a similar question last week, and I feel like option B had some features related to security enhancements.

upvoted 0 times

...

Han

11 months ago

I think option C looks familiar; it might be the one that includes route filtering, which could help with the attacks.

upvoted 0 times

...

Gail

11 months ago

I remember we discussed BGP configurations in class, but I'm not sure which option specifically addresses DDoS mitigation.

upvoted 0 times

...

Rossana

11 months ago

This is a tricky one, but I'm going to take my time and methodically work through the options. I want to make sure I fully understand the implications of each configuration before making my choice.

upvoted 0 times

...

Hermila

11 months ago

I'm feeling pretty confident about this one. Based on the exhibit, I believe Option B is the correct configuration to apply in order to mitigate the DDoS attacks.

upvoted 0 times

...

Vi

11 months ago

Okay, I think I've got a good handle on this. The key is to identify the BGP configuration that will help filter out malicious traffic while still allowing legitimate traffic to pass through.

upvoted 0 times

...

Rodolfo

11 months ago

Hmm, I'm a bit confused by the different BGP configuration options presented. I'll need to review the details of each one to understand how they would impact the network's security.

upvoted 0 times

...

Launa

11 months ago

This looks like a tricky BGP configuration question. I'll need to carefully analyze the exhibit and options to determine the best approach to mitigate the DDoS attacks.

upvoted 0 times

...

Larae

11 months ago

I'm pretty confident that the correct answer is option A, "Employees with a business need-to-know". That seems to be the most restrictive and appropriate access policy for highly confidential files.

upvoted 0 times

...

Angelyn

11 months ago

Okay, let's see. The key things to focus on here are the error type and the neighbor address. I think if I can figure out what the error type means, that should help me determine the correct answer.

upvoted 0 times

...