Which IPv6 First Hop Security mechanism prevents an attacker from assigning a SLAAC host its default gateway?

Last Updated: Jun 29, 2026
IT Exam Items Repository › Category: CCNP ENARSI v9 › Which IPv6 First Hop Security mechanism prevents an attacker from assigning a SLAAC host its default gateway?

Which IPv6 First Hop Security mechanism prevents an attacker from assigning a SLAAC host its default gateway?

  • IPv6 ND Inspection
  • IPv6 RA Guard
  • DHCPv6 Guard
  • IPv6 Destination Guard

Explanation: In a SLAAC environment, hosts use Router Advertisement (RA) messages to dynamically discover their default gateway. IPv6 RA Guard is the mechanism designed to prevent rogue or unwanted routers from sending RA messages to hosts, thereby preventing an attacker from incorrectly assigning themselves as the default gateway for SLAAC hosts.

Related exam: Checkpoint Exam: MPLS and VPN Technologies

About The Author

ITExamAnswers Editorial Team

The ITExamAnswers Editorial Team is a dedicated group of certified IT professionals and network engineers. We rigorously review, verify, and update all exam materials to ensure you receive the most accurate and reliable resources for your certification journey.