Which IPv6 switch feature blocks all host traffic on initial port connection except traffic needed to obtain an IPv6 address and perform neighbor discovery?
Choose an answer
Tap an option to check your answer.
Correct answer: IPv6 Source Guard.
Why this is the answer
IPv6 Source Guard is designed to prevent unauthorized IPv6 hosts from sending traffic on the network. When a host first connects to a port, IPv6 Source Guard blocks all its traffic except for specific packets needed to obtain an IPv6 address (like DHCPv6 Solicit/Request) and perform Neighbor Discovery (like Neighbor Solicitation/Advertisement). Once the host's IPv6 address is validated, its traffic is allowed. IPv6 DHCP Guard protects against rogue DHCPv6 servers. IPv6 Destination Guard protects against traffic destined for unauthorized IPv6 addresses. IPv6 RA Guard protects against rogue IPv6 Router Advertisements. These features serve different security purposes and do not block all host traffic on initial connection in the same manner as IPv6 Source Guard.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed