exam questions

Exam 350-501 All Questions

View all questions & answers for the 350-501 exam

Exam 350-501 topic 1 question 13 discussion

Actual exam question from Cisco's 350-501
Question #: 13
Topic #: 1
[All 350-501 Questions]


Refer to the exhibit. Router 1 was experiencing a DDoS attack that was traced to interface gigabitethernet0/1.
Which statement about this configuration is true?

  • A. Router 1 accepts all traffic that ingresses and egresses interface gigabitethernet0/1.
  • B. Router 1 drops all traffic that ingresses interface gigabitethernet0/1 that has a FIB entry that exits a different interface.
  • C. Router 1 accepts source addresses that have a match in the FIB that indicates it is reachable through a real interface.
  • D. Router 1 accepts source addresses on interface gigabitethernet0/1 that are private addresses.
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️
Reference:
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/sw/4_1/nx-os/security/configuration/guide/sec_nx-os-cfg/sec_urpf.html

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Zeal
Highly Voted 6 months, 2 weeks ago
C is correct because Loose Mode only checks if there is any entry in the routing table for the source of that packet .
upvoted 9 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago