Which of the following statements about URPF, IPSG and DAI are wrong? (Multiple Choice)

• A.URPF can be used to prevent DDoS false source attacks.
• B.IPSG checks the source IP address and MAC address of the IP message. DAI only checks the correspondence between IP and MAC.
• C.DAI does not support manual configuration of the binding table.
• D.IPSG technology checks IP packets to prevent source IP spoofing attacks, while DAI checks ARP packets to filter the attack source

Comment: *

Name: *

Email: *

Verification: *

There is an AS-path-filter, ip as-path-filter 1 permit ^100(_100)*(_400)*, which AS-PATH attribute cannot be matched by the As-path-filter?

• A.100
• B.100 400
• C.100 200 900
• D.100 400 400 400

Comment: *

Name: *

Email: *

Verification: *

As shown in the figure, in the IPv4 and IPv6 environment, the SEL field in the ISIS NET address always takes the value 00.

• A.True
• B.False

Comment: *

Name: *

Email: *

Verification: *

Which of the following statement about the digital certificate is wrong?

• A.Even if the two PRI entities are not in the same CA system, the two parties can complete the authentication as long as they can identify each other.
• B.When the received peer certificate is valid, but the device itself is in the wrong time and is not within the validity period of the certificate, the authentication fails.
• C.The digital certificate contains public key information.
• D.Digital signatures guarantee the integrity of digital certificates.

Comment: *

Name: *

Email: *

Verification: *

As shown in the figure, the MP-BGP neighbor relationship is established between PE1 and PE2 through Loopback 0 interface. After the configuration is completed, it is found that CE1 and CE2 cannot learn the path from each other. Which of the following options will cause this problem? (Multiple choice)

• A.The LSP tunnel between PE1 and PE2 is not established
• B.PE1 or PE2 is not enabled with neighbors in BGP-VPNv4 unicast address family view
• C.The routing protocol configuration between PE1 or PE2 and the respective CE is incorrect
• D.The VPN instance parameter configuration on PE1 or PE2 is incorrect

Comment: *

Name: *

Email: *

Verification: *