Implementing Cisco Enterprise Advanced Routing and Services (ENARSI) — Question 94

What are two functions of IPv6 Source Guard? (Choose two.)

Answer options

• A. It works independent from IPv6 neighbor discovery.
• B. It denies traffic from unknown sources or unallocated addresses.
• C. It uses the populated binding table to allow legitimate traffic.
• D. It denies traffic by inspecting neighbor discovery packets for specific patterns.
• E. It blocks certain traffic by inspecting DHCP packets for specific sources.

Correct answer: B, C

Explanation

IPv6 Source Guard is designed to enhance network security by blocking traffic from unknown sources or unallocated addresses (B), and it allows legitimate traffic through by referencing the binding table (C). Options A and D misstate the functionality of IPv6 Source Guard, as it does indeed rely on neighbor discovery, and option E is incorrect because it does not inspect DHCP packets.