Exam 300-615 topic 1 question 54 discussion

Actual exam question from Cisco's 300-615

Question #: 54
Topic #: 1

A client reports that many flaps and server cluster disconnects are occurring in its data center. While troubleshooting the issue, an engineer discovers that a network attack is hitting the Cisco Nexus 7000 Series Switches and that the source IP addresses are spoofed. Which first-line security solution resolves this issue?

A. Dynamic ARP Inspection
B. Unicast RPF
C. IP Source Guard
D. Storm Control

Show Suggested Answer

Suggested Answer: A 🗳️

by ccnp_or_bust at Feb. 24, 2021, 12:47 p.m.

Comments

Submit Cancel

ccnp_or_bust

Highly Voted 3 years, 4 months ago

Why isn't this C) IP Source Guard?

upvoted 7 times

...

scorpfe

Most Recent 2 months, 4 weeks ago

Selected Answer: C

C --> IP Source Guard is a security feature that prevents IP source address spoofing by binding the IP address to the MAC address and the port

upvoted 1 times

...

redgremlin

9 months, 2 weeks ago

What about B? Unicast Reverse Path Forwarding (uRPF) helps your router to drop IP packets with spoofed source IP addresses. Unicast RPF is specifically designed to address the issue of IP address spoofing and is a good first-line defense against such attacks. It helps ensure that only legitimate traffic with correctly sourced IP addresses is allowed into the network.

upvoted 1 times

...

SwitchKiller

2 years, 11 months ago

Ip Source Guard protects against Spoofed IP Addresses

upvoted 2 times

...