Implementing Cisco Enterprise Advanced Routing and Services (ENARSI) — Question 287

Which IPv6 first-hop security feature helps to minimize denial of service attacks?

Answer options

• A. IPv6 Router Advertisement Guard
• B. IPv6 Destination Guard
• C. DHCPv6 Guard
• D. IPv6 MAC address filtering

Correct answer: B

Explanation

The correct choice, IPv6 Destination Guard, prevents unauthorized devices from sending packets to a destination, thereby mitigating potential denial of service attacks. In contrast, IPv6 Router Advertisement Guard primarily protects against rogue router advertisements, DHCPv6 Guard focuses on securing DHCPv6 messages, and IPv6 MAC address filtering restricts access based on MAC addresses, which does not directly address denial of service attacks.