JNCIE-DC: Juniper Networks Certified Expert – Data Center — Question 7

Which three statements are correct about BGP flowspec? (Choose three.)

Answer options

• A. BGP flowspec uses MP-BGP to automatically distribute filters to service provider edge routers.
• B. BGP flowspec filters are implemented in the forwarding plane of an MX Series router to enable high-speed filtering of attacks.
• C. BGP flowspec uses Junos Space Security Director to distribute filters to service provider edge routers.
• D. The BGP flowspec service runs on service provider edge routers to quickly detect DDoS attacks.
• E. BGP flowspec allows for more granular filtering that null-routing DDoS victims at the service provider edge.

Correct answer: A, D, E

Explanation

The correct answers A, D, and E highlight the key functionalities of BGP flowspec in distributing filters, detecting DDoS attacks quickly, and allowing for more precise filtering. Option B is incorrect because it does not accurately describe the implementation of BGP flowspec filters, and option C is wrong as Junos Space Security Director is not used for this purpose.