Cisco Exam 350-501 Topic 1 Question 111 Discussion

Actual exam question for Cisco's 350-501 exam

Question #: 111
Topic #: 1

Refer to the exhibit:

Router 1 was experiencing a DDoS attack that was traced to interface gjgabitethernet0/1.

Which statement about this configuration is true?

ARouter 1 drops all traffic that ingresses interface gigabitethernet0/1 that has a FIB entry that exits a different interface

BRouter 1 accepts source addresses on interface gigabitethemet0/1 that are private addresses

CRouter 1 accepts all traffic that ingresses and egresses interface gigabitethernet0/1

DRouter 1 accepts source addresses that have a match in the FIB that indicates it is reachable through a real interface

Show Suggested Answer

Suggested Answer: D

by Carylon at Apr 04, 2025, 05:33 AM

Limited Time Offer

25%

Off

Contribute your Thoughts:

Submit Cancel

6 days ago

Hmm, I think Option D is the correct answer. The router should only accept traffic with valid FIB entries, not just any private addresses.

upvoted 0 times

...

6 days ago

That's a good point, but I still think D is the correct answer based on the configuration provided in the exhibit.

upvoted 0 times

...

7 days ago

I disagree, I believe the answer is A because dropping traffic with a FIB entry that exits a different interface would help prevent DDoS attacks.

upvoted 0 times

...

9 days ago

Option A sounds reasonable, but I'm not sure if it's the complete answer. We need more context on the DDoS attack and the router's configuration.

upvoted 0 times

...

21 days ago

I think the answer is D because it makes sense to only accept traffic from a source address that is reachable through a real interface.

upvoted 0 times

...