Implementing and Operating Cisco Service Provider Network Core Technologies (SPCOR) — Question 93

While implementing TTL security, you issue the PE(config-router-af)#neighbor 2.2.2.2 ttl-security hops 2 command.
After you issue this command, which BGP packets does the PE accept?

Answer options

• A. to 2.2.2.2, with a TTL of 2 or more
• B. from 2.2.2.2, with a TTL of less than 2
• C. to 2.2.2.2, with a TTL of less than 253
• D. from 2.2.2.2, with a TTL of 253 or more

Correct answer: D

Explanation

The correct answer is D because the command specifies that the PE will accept packets from the neighbor 2.2.2.2 only if their TTL is 253 or higher, ensuring that they originated from a closer source. Options A, B, and C are incorrect as they do not meet the TTL requirements specified in the command.