Exam 400-007 topic 1 question 87 discussion

I say B & C The IPv6 Destination Guard feature works with IPv6 neighbor discovery to ensure that the device performs address resolution only for those addresses that are known to be active on the link. https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipv6_fhsec/configuration/xe-16/ip6f-xe-16-book/ipv6-dest-guard.html The IPv6 Prefix Guard feature works within the IPv6 Source Guard feature, enabling the device to deny traffic originated from nontopologically correct addresses. https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipv6_fhsec/configuration/xe-16/ip6f-xe-16-book/ip6-src-guard.html

based on https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipv6_fhsec/configuration/xe-16/ip6f-xe-16-book/ipv6-dest-guard.html B,C should be correct

The correct answers are D. IPv6 Source Guard and C. IPv6 Prefix Guard.

Answer BD: B. IPv6 Destination Guard D. IPv6 Source Guard Explanation: IPv6 Destination Guard: This feature blocks Neighbor Discovery Protocol (NDP) resolutions for destination addresses that are not found in the binding table. It ensures that NDP requests and responses are only allowed for addresses that have valid entries in the binding table, preventing malicious attempts to spoof or hijack IPv6 addresses. IPv6 Source Guard: This feature denies access to traffic from sources with addresses that are correct in format but are topologically incorrect. IPv6 Source Guard verifies the source IP address of incoming packets against a binding table, ensuring that the address is legitimate and correctly associated with the interface from which it is received.

Source Guard RA Guard

answer can be BD

AB. RA guard for stoping wrong topo and dest guard for incorrect dest addr binding

BC is correct. Question asks about destination being in table and not source.

CD is correct

IPV6 Source Guard : IPv6 source guard is an interface feature between the populated binding table and data traffic filtering. This feature enables the device to deny traffic when it is originated from an address that is not stored in the binding table

https://www.cisco.com/c/dam/global/ja_jp/td/docs/ios-xml/ios/ipv6_fhsec/configuration/xe-16/ip6f-xe-16-book.pdf