Free 400-007 Questions Attempt

Unicast Reverse Path Forwarding (uRPF)is a security feature that helps mitigate IP spoofing attacks. It checks whether the source of a packet received on an interface matches the best return path to that source in the routing table.

Strict Mode (C):Ensures the source IP address of a packet is reachable via the same interface on which the packet was received. This prevents forged source IP addresses from traversing the network, which is essential in defending against outbound DDoS attacks sourced from infected hosts.

Loose Mode (B):Only verifies that the source IP exists in the routing table (less strict), which might still allow spoofing in multi-homed or asymmetric environments.

uRPF strict mode is the best fit in secure environments with symmetric routing—commonly in enterprise edge or distribution layers.

==========

The IoT ecosystem continues to evolve around industry-wide agreements on protocols, frameworks, security, interoperability, and standards:

D: Multiple IoT consortia (such as Industrial Internet Consortium, Open Connectivity Foundation, etc.) are still developing open frameworks and interoperability models.

E: IoT standards for security, data privacy, management, and protocol interoperability are still maturing as the market rapidly evolves.

Why other options are incorrect:

A: Wi-Fi protocols (such as 802.11ax) are already mature and standardized for IoT.

B: Regulatory domains (frequency allocations, power levels) are already well-established.

C: Low-energy Bluetooth sensors are already standardized and widely implemented.

—

C (Layer 2 switches unaffected):IPv6 operates at Layer 3, so pure Layer 2 switches forward frames without needing IPv6 awareness. As long as switches can transparently forward Ethernet frames, IPv6 functionality will be preserved, minimizing unnecessary hardware upgrades.

Other options explained:

A/B/D: These unnecessarily increase cost and complexity for basic Layer 2 functionality where IPv6 awareness is not mandatory.