300-410 Question 141

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• 1

  Based on Chatgpt the correct answer is C. Although none of the options directly match the functionality of IPv6 Router Advertisement Guard, using PVLANs with community ports and isolated ports can help isolate traffic and control communication, making it more difficult for rogue RAs to reach unauthorized nodes. This setup is an indirect but potential method of mitigating rogue RAs without using RA Guard.

• Chose B4

  Private VLANs can be used a security feature to partition ports into separate broadcast domains. Configure the port that will be receiving router advertisements as promiscuous because promiscuous ports can communicate with community and isolated private VLANS. If you configured the port that receives router advertisements in a community private VLAN, it wouldn't be able to forward traffic to isolated ports, only to other ports in its community VLAN

• Chose B4

  To block rogue router advertisements in an IPv6 network, you should use option B: B. PVLANs (Private VLANs) with promiscuous ports associated with route advertisements and isolated ports for nodes. Private VLANs help in segmenting traffic within a VLAN and provide isolation between devices within the same VLAN. In this context, you can configure a PVLAN such that the promiscuous port (connected to a trusted router) is allowed to send router advertisements, while the isolated ports (connected to end-user devices) are not allowed to send such advertisements. This way, you can prevent rogue router advertisements from unauthorized sources within the same VLAN.