3.3 Data Plane Protection Techniques CCIE-SECURITY Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   In RTBH filtering, what is typically done with traffic destined to the blackholed IP address?

   • AIt is silently dropped
   • BIt is rate-limited to a low value
   • CIt is logged and forwarded
   • DIt is redirected to a different server
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   What is the role of a static route to null0 in RTBH implementation?

   • AIt redirects traffic to a firewall for inspection
   • BIt defines the blackhole destination that causes traffic to be discarded
   • CIt provides a backup path for traffic
   • DIt is used to load-balance traffic
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   In RTBH implementation, what is the purpose of using BGP communities?

   • ATo signal to other routers that a route should be blackholed
   • BTo encrypt BGP updates
   • CTo load-balance traffic across multiple paths
   • DTo filter BGP routes based on AS path
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   How does BGP propagate RTBH routes across a network?

   • ABy using BGP route reflectors to automatically blackhole all routes
   • BBy sending a special BGP update that contains the blackhole list
   • CBy advertising a route with a specific community that triggers blackholing on receiving routers
   • DBy changing the next-hop attribute to null0
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Which command can be used to verify that an RTBH route is active on a Cisco router?

   • Ashow ip interface
   • Bshow ip bgp summary
   • Cshow ip route
   • Dshow access-lists
   Reveal Solution Discussion Select an answer first