300-440 Question 200
Single answerA company has deployed multiple branch routers connected to the headquarters over the internet. Security policies require all branch routers to exchange routing information with the headquarters router securely and prevent unauthorized devices from participating in the routing domain. Which feature should be implemented to meet this requirement?
- A
Route filtering with prefix lists
- B
OSPF authentication using MD5 or SHA
- C
Route summarization at branch routers
- D
BGP communities for policy-based routing
Show answer and explanation
Correct answer: B
Explanation
OSPF authentication using MD5 or SHA adds a layer of security to the OSPF routing protocol by ensuring that only routers with matching authentication credentials can exchange routing information. This prevents unauthorized devices from participating in the routing domain and ensures secure communication between branch and headquarters routers.
- A. Incorrect.
Route filtering with prefix lists is used to control which routes are advertised or accepted but does not provide secure authentication or prevent unauthorized devices from participating in the routing domain.
- B. Correct.
OSPF authentication using MD5 or SHA ensures that only authorized routers with matching authentication credentials can participate in the OSPF routing domain, meeting the requirement for secure routing information exchange.
- C. Incorrect.
Route summarization optimizes routing tables and reduces the number of advertised routes but does not enhance security or provide authentication for routers.
- D. Incorrect.
BGP communities are used for tagging and controlling route policies, which is unrelated to securing the routing domain or authenticating devices.