Exit JN0-1331 Security Design, Specialist (JNCDS-SEC)
Question 1 of 5
0% complete
Q1 Multiple choice

You are designing a DDoS solution for an ISP using BGP FlowSpec. You want to ensure that BGP FlowSpec does not overwhelm the ISP's edge routers.

Which two requirements should be included in your design? (Choose two.)

Select all that apply.

  • A

    Specify a maximum number BGP FlowSpec prefixes per neighbor

  • B

    Implement a route policy to limit advertised routes to /24 subnets

  • C

    Implement a route policy to limit advertised routes to any public IP space

  • D

    Specify a maximum number of BGP FlowSpec prefixes per device

Previous Next