Implementing Cisco Enterprise Advanced Routing and Services (ENARSI) — Question 539

Which IPv6 security feature blocks all traffic from an IPv6 host when initially connecting to a switch port except for traffic to gain an IPv6 address and discover IPv6 neighbors?

Answer options

• A. IPv6 Source Guard
• B. IPv6 DHCP Guard
• C. IPv6 Destination Guard
• D. IPv6 RA Guard

Correct answer: A

Explanation

The correct answer, IPv6 Source Guard, is designed to block all unauthorized traffic from an IPv6 host when it first connects to a switch port, only allowing traffic for IPv6 address acquisition and neighbor discovery. The other options, while related to IPv6 security, do not provide the same level of initial traffic restriction for newly connected hosts.