Which IPv6 First-Hop Security feature can block IPv6 traffic if this traffic is from an unknown origin?

Question:

Which IPv6 First-Hop Security feature can block IPv6 traffic if this traffic is from an unknown origin?

• RA Guard
• Source Guard
• DHCPv6 Guard
• IPv6 ND inspection/snooping

Explanation: IPv6 Source Guard is a Layer 2 snooping interface feature for validating the source of IPv6 traffic. If the traffic arriving on an interface is from an unknown source, IPv6 Source Guard can block it.

Exam with this question: CCNP Enterprise: Advanced Routing (Version 8.0) – Infrastructure Security and Management Exam
Exam with this question: CCNP ENARSI v8 Certification Practice Exam