Valid 350-501 Dumps shared by ExamDiscuss.com for Helping Passing 350-501 Exam! ExamDiscuss.com now offer the newest 350-501 exam dumps, the ExamDiscuss.com 350-501 exam questions have been updated and answers have been corrected get the newest ExamDiscuss.com 350-501 dumps with Test Engine here:
Refer to the exhibit. A network engineer must deny access from spoofed addresses to the LAN. The edge router currently has two active BGP sessions established with Tier 1 ISP_A. Due to asymmetric routing, no ACL is configured on either interface. Which two configurations must the engineer perform on the edge router to complete the task? (Choose two.)
Correct Answer: A,C
To prevent access from spoofed addresses to the LAN, the engineer should enable Unicast Reverse Path Forwarding (uRPF). uRPF checks the reachability of the source address in packets being forwarded, which helps mitigate issues caused by malformed or forged IP source addresses. * Option A is correct because it enables uRPF on interface FA0/0 and verifies that the source address is reachable via the outgoing interface, which is essential when the routing is symmetric. * Option C is also correct as it enables uRPF on interface FA0/1 and allows the source address to be reachable via any interface, accommodating environments with asymmetric routing. References := * Implementing and Operating Cisco Service Provider Network Core Technologies (SPCOR) source book and study guide.