Which type of attack is uRPF specifically designed to mitigate?

Malware propagation through email attachments

Brute-force attacks on router passwords

Man-in-the-middle attacks that intercept and modify traffic

Denial-of-service attacks that use spoofed source IP addresses

What is the key difference between strict and loose uRPF modes?

Strict mode is used for IPv6, while loose mode is used for IPv4

Strict mode requires the source address to be reachable via the exact interface the packet arrived on; loose mode only requires a route to the source in the routing table

Strict mode drops all packets, while loose mode allows all packets

Strict mode is configured globally, while loose mode is configured per interface

In which scenario is loose uRPF mode more appropriate than strict mode?

When the router has a single default route

When the network has asymmetric routing paths

When the interface is connected to a single-homed stub network

When the router is running BGP with multiple peers

Which Cisco IOS command is used to enable uRPF in strict mode on an interface?

ip verify unicast source reachable-via any

ip verify unicast source reachable-via rx

CCIE Security

Domain 3Objective 3

3.3 Data Plane Protection Techniques CCIE-SECURITY Practice Questions (Page 3)

Part of the 3.0 Security Infrastructure domain, which accounts for 15% of the CCIE-SECURITY exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 1–1 from this objective — we provide 38 practice questions to prepare you well beyond it. (estimate)

38questions here

8free pages

9concepts

15%of the exam

Questions 11–15

11foundation · easy
Which type of attack is uRPF specifically designed to mitigate?
Select an answer first
12foundation · easy
What is the key difference between strict and loose uRPF modes?
Select an answer first
13foundation · easy
In which scenario is loose uRPF mode more appropriate than strict mode?
Select an answer first
14foundation · easy
Which Cisco IOS command is used to enable uRPF in strict mode on an interface?
Select an answer first
15foundation · easy
Which show command displays uRPF drops on a Cisco router?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCIE-SECURITY

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “CCIE-SECURITY” is a trademark of its owner, used for identification only.