Cisco Exam 350-501 Topic 4 Question 94 Discussion

Actual exam question for Cisco's 350-501 exam

Question #: 94
Topic #: 4

Refer to the exihibit.

Refer to the exhibit. A large enterprise has multiple branch offices that span several geographic regions. The enterprise runs MPLS within the core to propagate VPNv4 routes using BGP. After a recent series of DDoS attacks disrupted the network, a network engineer has been asked to reconfigure BGP to help mitigate future attacks. Which configuration must the engineer apply?

AOption A

BOption B

COption C

DOption D

Show Suggested Answer

Suggested Answer: B

To mitigate DDoS attacks in a BGP environment, an engineer can apply BGP FlowSpec, which allows for the creation of traffic filtering policies that can be distributed across the network.This configuration enables the network to respond quickly to DDoS attacks by filtering or redirecting malicious traffic based on predefined criteria, such as source IP, destination IP, and port numbers456.

by Arlette at Aug 08, 2024, 07:39 PM

Limited Time Offer

25%

Off

Get Premium 350-501 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Pansy

3 months ago

Has anyone considered using a magic 8-ball to decide this one? Seems like as good a method as any, if you ask me.

upvoted 0 times

...

Alease

3 months ago

I'm gonna have to go with Option B. It's like the Goldilocks of BGP configs - not too hot, not too cold, just right for this DDoS situation.

upvoted 0 times

Mickie

2 months ago

I think Option B is the best fit too. It strikes a good balance for the network's needs.

upvoted 0 times

...

Mickie

3 months ago

I agree, Option B seems like the most balanced choice for this scenario.

upvoted 0 times

...

Lashawnda

3 months ago

Pfft, Option A? Really? That's like trying to stop a freight train with a wet paper towel. Not gonna cut it, my friend.

upvoted 0 times

...

Elmira

3 months ago

Hmm, Option D has a certain je ne sais quoi about it. A little bit of route dampening might just be the secret sauce we need here.

upvoted 0 times

Annice

3 months ago

Yeah, Option D could definitely help mitigate future attacks. Let's go with that.

upvoted 0 times

...

Deandrea

3 months ago

I agree, Option D with route dampening seems like a solid choice.

upvoted 0 times

...

Jeannetta

4 months ago

Option C provides better security measures to mitigate future DDoS attacks.

upvoted 0 times

...

Melinda

4 months ago

Why do you think Option C is better?

upvoted 0 times

...

Jeannetta

4 months ago

I disagree, I believe Option C is the best choice.

upvoted 0 times

...

Thea

4 months ago

I dunno, Option C seems more comprehensive. Gotta make sure we're blocking those malicious routes from all angles, you know?

upvoted 0 times

Kanisha

3 months ago

Yeah, I agree. Option C looks like it provides a more comprehensive approach to mitigating future DDoS attacks.

upvoted 0 times

...

Latrice

3 months ago

I think Option C is the way to go. We need to cover all our bases when it comes to blocking those malicious routes.

upvoted 0 times

...

Lelia

4 months ago

Option B looks like it would do the trick. Filtering out those pesky DDoS routes should keep the network humming along nicely.

upvoted 0 times

Barbra

3 months ago

Definitely, filtering out those pesky DDoS routes will help maintain network stability.

upvoted 0 times

...

Ona

3 months ago

I agree, Option B seems like the most effective solution to prevent future attacks.

upvoted 0 times

...

Daniel

4 months ago

Option B is a good choice. Filtering out DDoS routes is crucial for network security.

upvoted 0 times

...

Melinda

4 months ago

I think we should go with Option B.

upvoted 0 times

...