CompTIA Network+ (N10-008) — Question 446

A network administrator is configuring Neighbor Discovery Protocol in an IPv6 network to ensure an attacker cannot spoof link-layer addresses of network devices. Which of the following should the administrator implement?

Answer options

• A. MAC filtering
• B. Router Advertisement Guard
• C. Port security
• D. DNSSEC

Correct answer: B

Explanation

The correct answer is B, Router Advertisement Guard, as it specifically protects against malicious Router Advertisements that can lead to link-layer address spoofing. Options A (MAC filtering) and C (Port security) are general security measures that do not directly address this specific threat, while D (DNSSEC) pertains to securing DNS information, which is unrelated to link-layer address protection.