Exam CAS-002 topic 1 question 10 discussion

Actual exam question from CompTIA's CAS-002

Question #: 10
Topic #: 1

A security administrator was doing a packet capture and noticed a system communicating with an unauthorized address within the 2001::/32 prefix. The network administrator confirms there is no IPv6 routing into or out of the network. Which of the following is the BEST course of action?

A. Investigate the network traffic and block UDP port 3544 at the firewall
B. Remove the system from the network and disable IPv6 at the router
C. Locate and remove the unauthorized 6to4 relay from the network
D. Disable the switch port and block the 2001::/32 traffic at the firewall

Show Suggested Answer

Suggested Answer: A 🗳️

by AB1938 at March 23, 2022, 1:44 p.m.

Comments

Submit Cancel

tirajvid

1 year, 4 months ago

Selected Answer: A

Correct answer is A. UDP port 3544 is used by Teredo tunneling to tunnel IPV6 traffic using IPv4 over the Internet through NAT devices. Answer C is not correct as tunnel relay may not be in the internal network.

upvoted 1 times

...

AB1938

3 years, 1 month ago

Selected Answer: A

A - because no other option makes sense, whatsoever. Typical answer by the process of elimination: B&C - the question already tells you no IPv6 of any kind in or out of the network and D you can just shut down a switch port. I do not know why but CompTIA likes to "block UDP 3544 port" - there was another question where that was part of the choose-two answers. I talked to network engineer exert and he said that was dumbest question and answer he's ever heard of.

upvoted 1 times

...

Exam CAS-002 All Questions

View all questions & answers for the CAS-002 exam

Exam CAS-002 topic 1 question 10 discussion

Comments

tirajvid

AB1938

SY0-701