Refer to the exhibit. An attacker can advertise OSPF fake routes from 172.16.20.0 network to the OSPF domain and black hole traffic. Which action must be taken to avoid this attack and still be able to advertise this subnet into OSPF?
A.
Configure 172.16.20.0 as a stub network.
B.
Configure graceful restart on the 172.16.20.0 interface.
C.
Configure a passive interface on R2 toward 172.16.20.0.
D is the answer as if you look at the question, it is to stop fake routes from being injected into OSPF but we still need to advertise this subnet so there is OSPF neighborship and passive interface is not relevant. Applying filter to reject other router is more realistic
We labbed this in EVE-NG and setting the interface facing 172.16.20.0/24 does indeed mean this network remains in OSPF but any relationship between a router on that subnet will fail to establish.
C is correct.
This section is not available anymore. Please use the main Exam Page.350-401 Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Brand
Highly Voted 2 years, 2 months agoMegon
Most Recent 9 months, 1 week ago[Removed]
11 months agoHaidary
1 year, 4 months agoCCNPWILL
1 year, 6 months agosnarkymark
2 years, 2 months agocivan
2 years, 3 months agoAndreasThornus
2 years, 4 months agomilovnik1
2 years, 4 months agoforccnp
2 years, 4 months agoshoo83
2 years, 5 months agoDataset
2 years, 5 months agoDarude
2 years, 5 months agotestcom680
2 years, 5 months ago