ExamQuestions.com

Register
Login
CCIE Security Written Exam (400-251) Exam Questions

Cisco

CCIE Security Written Exam (400-251)

83 / 530

Question 83:

Which configuration implements an ingress traffic filter on a dual-stack ISR border router to prevent attacks from the outside to services such as DNSv6 and DHCPv6? 

Answer options:

A. ! ipv6 access-list test deny ipv6 FF05::/16 any deny ipv6 any FF05::/16 ! output omitted permit ipv6 any any !
B. ! ipv6 access-list test permit ipv6 any FF05::/16 ! output omitted deny ipv6 any any !
C. ! ipv6 access-list test deny ipv6 any any eq dns deny ipv6 any any eq dhcp ! output omitted permit ipv6 any any !
D. ! ipv6 access-list test deny ipv6 any 2000::/3 ! output omitted permit ipv6 any any !
E. ! ipv6 access-list test deny ipv6 any FE80::/10 ! output omitted permit ipv6 any any