Which IPv6 First Hop Security mechanism drops NA messages that do not have a corresponding source address in the binding table?

Last Updated: Jun 29, 2026
IT Exam Items Repository › Category: CCNP ENARSI v9 › Which IPv6 First Hop Security mechanism drops NA messages that do not have a corresponding source address in the binding table?

Which IPv6 First Hop Security mechanism drops NA messages that do not have a corresponding source address in the binding table?

  • IPv6 Source Guard
  • DHCPv6 Guard
  • RA Guard
  • IPv6 ND Inspection

Explanation: IPv6 ND Inspection is a First Hop Security tool that analyzes Neighbor Discovery (ND) messages, specifically Neighbor Solicitations (NS) and Neighbor Advertisements (NA). It drops any ND message that lacks a valid, verifiable IPv6-to-MAC mapping in the binding table, effectively preventing address spoofing at Layer 2.

Related exam: Checkpoint Exam: MPLS and VPN Technologies

About The Author

ITExamAnswers Editorial Team

The ITExamAnswers Editorial Team is a dedicated group of certified IT professionals and network engineers. We rigorously review, verify, and update all exam materials to ensure you receive the most accurate and reliable resources for your certification journey.