Which two functions describe how the IPv6 First-Hop Security Binding Table operates? (Choose two.)
Choose an answer
Tap an option to check your answer.
Correct answer: By various IPv6 guard features to validate the data-link-layer address, By a recovery mechanism that restores the binding table after a device reboot.
Why this is the answer
The IPv6 First-Hop Security (FHS) Binding Table is crucial for securing IPv6 networks. It's populated by various IPv6 guard features, such as Neighbor Discovery Inspection (NDI) and DHCPv6 Snooping, to validate the data-link-layer (MAC) address against the IPv6 address and other parameters. This ensures that only legitimate devices can communicate on the network, preventing spoofing and other attacks. Additionally, the binding table includes a recovery mechanism to restore its entries after a device reboot, ensuring persistent security enforcement without manual intervention. Incorrect options: IPv6 HSRP (Hot Standby Router Protocol) is for gateway redundancy, not for authenticating neighbors in the context of FHS. IPv6 routing protocols build neighborships based on routing information, not by using the FHS binding table for secure, unauthenticated neighbor discovery. The binding table stores IPv6-to-MAC mappings for FHS, not hashed keys for IPsec tunnels.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed