Huawei Certified ICT Expert – Data Center Network (HCIE-DCN) — Question 6

Regarding the IPSG, which of the following statement is incorrect?

Answer options

• A. IPSG can prevent IP address spoofing attacks
• B. IPSG is a source IP address filtering technology based on the three-layer interface
• C. IPSG can turn on the IP packet inspection and alarm function, and cooperate with the network management to perform alarms
• D. IPSG can prevent the host from changing the IP address privately

Correct answer: B

Explanation

Option B is incorrect because IPSG is not specifically based on a three-layer interface; it operates at the Layer 2 level for filtering. The other options correctly describe the capabilities of IPSG in preventing spoofing attacks, enabling packet inspection and alarms, and restricting unauthorized IP address changes.