Select the Cisco First-Hop Security features supported (choose three).
Choose an answer
Tap an option to check your answer.
Correct answer: IPv6 RA Guard, DHCPv6 Guard, IPv6 Snooping.
Why this is the answer
IPv6 RA Guard protects against rogue IPv6 router advertisements (RAs) that could redirect traffic or launch denial-of-service attacks. DHCPv6 Guard filters DHCPv6 messages, preventing unauthorized DHCPv6 servers from assigning IP addresses and other network parameters. IPv6 Snooping maintains a binding table of IPv6 addresses and corresponding MAC addresses, similar to ARP snooping for IPv4, to validate source addresses and prevent spoofing. IPv6 Source Guard is not a standard Cisco First-Hop Security feature; it's typically associated with IPv4. DHCPv6 Snooping is not a distinct feature but rather a component or concept within DHCPv6 Guard.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed