CCNA Security Chapter 12 - Securing the Data Plane in IPv6

Which of the following are the valid first four characters of a globally routable IPv6 address? (Choose all that apply.)

1234

2345

3456

4567

Which of the following are the valid first four characters of a link-local address?

FE80

FF02

2000

3000

What is the default method for determining the interface ID for a link-local address on Ethernet?

EUI-64

MAC address with FFFE at the end

MAC address with FFFE at the beginning

Depends on the network address being connected to

Which of the following routing protocols have both an IPv4 and IPv6 version? (Choose all that apply.)

Routing Information Protocol

Enhanced Interior Gateway Routing Protocol

Open Shortest Path First

Interior Gateway Routing Protocol

Which best practices apply to networks that run both IPv4 and IPv6? (Choose all that apply.)

Physical security

Routing protocol authentication

Authorization of administrators

Written security policy

Which of protocols, if abused, could impair an IPv6 network, but not IPv4? (Choose all that apply.)

ARP

NDP

Broadcast addresses

Solicited node multicast addresses

If a rogue IPv6 router is allowed on the network, which information could be incor- rectly delivered to the clients on that network? (Choose all that apply.)

IPv6 default gateway

IPv6 DNS server

IPv6 network address

IPv6 ARP mappings

Why is tunneling any protocol (including IPv6) through another protocol a security risk?

The innermost contents of the original packets may be hidden from normal security filters.

The tunnels, if they extend beyond the network perimeter, may allow undesired traffic through the tunnel.

Functionality might need to be sacrificed when going through a tunnel.

Quality of service, for the underlying protocol, might be compromised.

What is one method to protect against a rogue IPv6 router?

Port security

Static ARP entries

DHCPv6

RA guard

CCNA Security Chapter 12 - Securing the Data Plane in IPv6

More Quizzes