A security team is hardening a network that has IPv6 enabled. They want to prevent an attacker from using Neighbor Discovery to impersonate the default gateway and intercept traffic. Which control should they implement?

Use DHCPv6 snooping to filter DHCPv6 messages.

Enable RA Guard on the switches to block unauthorized Router Advertisements.

Disable IPv6 on all hosts to eliminate the attack surface.

Configure IPsec on all IPv6 traffic to authenticate the gateway.

GIAC Defensible Security Architect

Domain 3Objective 3

IPv6 GDSA Practice Questions (Page 10)

Part of the Network Services and Encryption domain, which makes up ~23% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~12–18 in this domain), expect 4–6 from this objective — we provide 46 practice questions to prepare you well beyond it. (estimate)

46questions here

10free pages

8concepts

Questions 46–46

46application · medium
A security team is hardening a network that has IPv6 enabled. They want to prevent an attacker from using Neighbor Discovery to impersonate the default gateway and intercept traffic. Which control should they implement?
Select an answer first

Finished these 1 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to GDSA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GDSA” is a trademark of its owner, used for identification only.

IPv6 GDSA Practice Questions (Page 10)

Questions 46–46

A security team is hardening a network that has IPv6 enabled. They want to prevent an attacker from using Neighbor Discovery to impersonate the default gateway and intercept traffic. Which control should they implement?

Keep studying — Network Services and Encryption