Implementing Cisco Enterprise Advanced Routing and Services (ENARSI) — Question 48

Which statement about IPv6 RA Guard is true?

Answer options

• A. It does not offer protection in environments where IPv6 traffic is tunneled.
• B. It cannot be configured on a switch port interface in the ingress direction.
• C. Packets that are dropped by IPv6 RA Guard cannot be spanned.
• D. It is not supported in hardware when TCAM is programmed.

Correct answer: A

Explanation

The correct answer is A because IPv6 RA Guard is ineffective against tunneled IPv6 traffic, making it vulnerable in such scenarios. Option B is incorrect as RA Guard can indeed be configured on ingress interfaces. Option C is false because dropped packets can be spanned, and option D misrepresents the functionality of TCAM with respect to IPv6 RA Guard.