CCDE: Cisco Certified Design Expert (Practical) — Question 59

Which technology supports antispoofing and does not have any impact on encryption performance regardless of packet size?

Answer options

• A. MACsec
• B. IP source guard
• C. DHCP snooping with DAI
• D. IPsec

Correct answer: B

Explanation

IP source guard is designed to prevent IP address spoofing and operates at Layer 2 without impacting encryption performance. In contrast, MACsec and IPsec focus on securing data transmission and may influence encryption efficiency. DHCP snooping with DAI also serves a different purpose related to DHCP security and does not specifically provide antispoofing capabilities.