Exam H19-424_V1.0 Topic 1 Question 42 Discussion

A. 22.0 also supports policy-based filtering of ND packets.

B. RA packets can carry a lot of network configuration information, including the default router, network prefix list, and whether to use a DHCPv6 server for stateful address allocation. An attacker can send forged RA packets to modify the network configuration of the user's host so that legitimate users cannot communicate properly. IPv6RGuard provides a defense mechanism against RA packet attacks, which can effectively prevent such network attacks.

C. If the interface is connected to the user host, the interface role is set to host, and if the interface is connected to the router, the administrator can configure the interface role to router according to the interface networking. Version 22.0 also supports policy-based filtering of ND packets.

D. Configure the host or router role for the interface, and then the device can forward or discard RA packets based on the interface role.