RIPE Border Gateway Protocol (BGP) Security Practice Test

These questions are part of the practice quiz. Start practicing

• Which option is NOT a name used for BGP information tables?
• Which show command lists the entire BGP table?
• What is BGPSEC and what security problem does it address?
• Which term refers to the BGP topology database?
• Which option is NOT a BGP message type?
• Which signal is commonly used to detect a BGP route hijack in real time?
• BGP routers establish a TCP connection with one another. These routers are called __________
• Which command must be used to tell BGP to use a loopback interface address instead of a physical interface address as the source address for all BGP packets?
• What do BGP routers exchange to indicate how to reach destination networks?
• BGP routes are compared to other possible paths to networks in the IP routing table and the best route is placed into the IP routing table based on which metric?
• BGP information is carried inside TCP segments, which are carried inside IP packets using port _______.
• What is AS_PATH prepending and how can it be used to influence routing for security or policy purposes?
• What fields does an Update message contain?
• Differentiate route leaks from route hijacks with examples.
• What command triggers a hard reset?
• Which is the first criterion listed in the BGP route selection order?
• State the BGP route selection process in order.
• A primary reason to use BGP in an AS
• Why is BGPsec not widely deployed yet?
• What are BGP communities and how can they be used to implement security-related policies?
• True or False: The BGP AS-path is not guaranteed to always be loop free.
• If a BGP network command with a mask is configured but there is no exact match in the routing table, what happens?
• Which path attribute in BGP is used to track the sequence of ASes and helps prevent loops?
• Which statement about BGP security mechanisms is true?
• TCP uses a ______ window that allows for up to 65,576 bytes to be outstanding before it stops and waits for an acknowledgement.
• Why is it important to keep ROA management aligned with prefix origination changes?
• What happens when BGP enters the established state?
• Give an example of a non transit AS
• Which mechanism does BGP rely on to determine the best path?
• What information does the 'show ip bgp neighbors' command tell you?
• Which scenario shows the weight attribute is used?
• What is Local Preference (LOCAL_PREF) and how can it influence security-related routing decisions?
• In BGP, which statement correctly describes the connect state?
• What is a recommended approach to implement prefix filtering to block bogon prefixes?
• Must iBGP neighbors be directly connected to form an iBGP session?
• In BGP, what occurs in the open confirm state?
• The number of BGP network commands that can be added to a router is based on what?
• What is bogon filtering and why should it be enabled?
• Which activity is directly related to ROA publishing in BGP security?
• Which description matches the output of the show ip bgp command?
• Provide an example of an iBGP configuration between two routers. Which option matches the example?
• Why is it beneficial to tie bogon prefix filtering with RPKI validation?
• What does the 'Established' neighbor state indicate?
• What are typical ROA validation statuses and how should each influence route acceptance?
• What information needs to be gathered in order to configure BGP?
• What does a ROA specify in relation to an AS and a prefix?
• Which statement about NLRI and path attributes is true?
• ROA coverage: what should you do if a necessary prefix is not covered?
• What is a recommended practice for MD5 key management in large multi-peer environments?
• In the provided iBGP example, what is true about the AS numbers of the two routers?
• What is the default value for BGP local preference?
• Which statement best describes how RPKI and IRR data complement each other for inbound filtering decisions?
• Which statement best describes periodic updates in BGP?
• What describes full-mesh iBGP?
• What is a recommended practice for MD5 key management when securing BGP sessions?
• Lack of memory or processor power on edge routers
• What is the Origin Code attribute?
• Which configuration sequence correctly sets up basic eBGP between two routers as shown?
• Which statement describes how BGP exchanges routing information with neighbors?
• What is generally used for an iBGP session to form?
• What is TCP-AO and why is it preferred over TCP-MD5 in modern deployments?
• Which statement describes the effect of strict inbound/outbound filtering in defensive routing?
• How does inbound prefix filtering help defend against incorrect route advertisements, and what methods are commonly used?
• Enabling a mask parameter in a BGP network command allows what?
• How do looking-glass data and BGPmon feeds assist incident investigations?
• Which data sources are commonly used to analyze past BGP incidents?
• What is the split-horizon rule?
• In BGP, what does the 'neighbor X remote-as Y' command configure?
• Which statement best describes the network command's purpose in BGP?
• Which statement about BGP table and IP routing table is true?
• What may cause BGP to flap between idle and active?
• In BGP policy, what can an AS influence?
• What is the default timer for keepalives in BGP?
• Which of the following is an Open message optional parameter?
• What mechanism is commonly used to prevent route leaks within an AS?
• How do you configure a filter list?
• What is another name for a soft reset?
• What type of protocol is BGP and what does it exchange?
• What is TTL Security Mechanism (TTLS) in BGP and what threat does it mitigate?
• Which symptom is associated with misconfigured AS numbers?
• Which statement best describes BGP's role on the Internet?
• In the iBGP example, which command configures the neighbor 172.16.23.2 with remote-as 65000?
• What command triggers a soft reset?
• What happens if the mask parameter isn't specified in a BGP network command?
• What is a subprefix hijack and how can RPKI help reduce this risk?
• What is the purpose of max-prefix configuration in protecting BGP from table floods?
• Why does a BGP router form neighbor relationships with a limited number of peers?
• NLRI stands for Network Layer Reachability Information
• When a route becomes unreachable, what does the BGP Update carry?
• What is a common consequence of MED misconfiguration?
• What must be present if the mask parameter is specified for BGP?
• In RPKI, what is the role of trust anchors?
• What is iBGP and what is it used for?
• Which command enters BGP configuration mode?
• How should Unknown/Not Found ROA validation statuses be handled in typical policy?
• What is the impact of a persistent BGP hijack and how can you recover?
• What does BGP use as its transport protocol?
• What is the purpose of prefix-lists in inbound filtering?
• In BGP, what characterizes the open sent state?
• Two routers configure for BGP are called _________.
• How do you verify that BGP security measures are effective after deployment?
• What is the role of BGP Communities in influencing routing behavior by peers?
• What is the purpose of the BGP 'network' command with a network-number and mask?
• What infrastructure changes are commonly required to enable BGP security enhancements (MD5/TCP-AO/RPKI/prefix filtering)?
• Which command is used to advertise networks to inject routes from the IPv4 routing table into the BGP table?
• How do ISPs and their customers communicate with one another?
• Which command displays the BGP state?
• Global monitoring via MANRS focuses on what benefit?
• What are the three requirements for an eBGP neighborship to form?
• Which mechanism best complements BGP security by validating route origins?
• Which statement best describes how BGP neighbors are maintained?
• If you find an invalid ROA for a prefix you originate, what should you do?
• If a ROA-based validation fails for a received route, what is a typical corrective action?
• What occurs in the idle state for BGP?
• Which tools and data sources are commonly used to study historical BGP security incidents?
• What is the purpose of max-prefix limits on BGP sessions and how should you set them?
• What is a BGP peer group used for?
• Which statement about the separation of BGP tables from the IP routing table is correct?
• What are the four BGP message types?
• In BGP, what is the difference between the neighbor command and the network command?
• What is the risk of not filtering eBGP sessions properly?
• Which of the following is a feature of a BGP peer group?
• What is the meaning of the term origin AS mismatch and how do you resolve it?
• What is a BGP Notification Message?
• Which of the following is a valid BGP match command set?
• How does the next-hop behavior in IGPs compare with BGP?
• What are common IRR data sources for route policy and their limitations?
• Which statement about BGP prefix filtering strategies is true?
• What are RPKI and ROA, and what does a ROA authorize?
• Why is BGP a highly applicable routing protocol for the Internet?
• Which symbol in the BGP table display indicates the best route?
• What is contained in a BGP notification message?
• How can you add resiliency to a BGP session?
• Which are common indicators of a BGP security incident in router logs?
• What is the hop-by-hop routing paradigm?
• True or False: BGP is a policy-based routing protocol.
• How should you secure BGP sessions with both IPv4 and IPv6 peers?
• Why is alignment with RIPE's BCOP and MANRS recommendations important for BGP security practice?
• Name four features a peer group can have
• Which of the following are among the six attributes used in the BGP Selection Process?
• What is the purpose of the MANRS initiative and which of the following are its four core actions?
• What is the next-hop attribute?
• Which command forces a router to advertise itself as the next-hop address for routes sent to a neighbor?
• Which attributes are considered optional transitive?
• Which statement about transport layer usage is true?
• Which method is NOT typically used to filter BGP routing updates?
• Which statement accurately describes iBGP and eBGP?
• What is the relationship between Unicast RPF and BGP RP filtering in practice?
• Where are restrictions on routing behavior enforced?
• What is an external BGP neighbor?
• What is full-mesh iBGP?
• Why do BGP routers reject an update that contains their own AS in the path?
• Which mechanism is commonly used to protect BGP session integrity against tampering in transit?
• What is a typical outcome of misconfigured export policies and what mitigations help?
• In BGP, during which session state are update, keepalive and notification messages exchanged?
• How can RPKI, IRR data, and prefix-lists be combined to create robust inbound filtering?
• True or False: BGP accepts unsolicited updates.
• Why should networks advertise only ROA-covered prefixes to peers?
• What is the RIPE NCC RIS used for in the context of BGP security analysis?
• What information is contained in an Open message?
• Name the two well-known discretionary attributes.
• How is the BGP network command different from the IGP network command?
• True or False: The router bgp command alone activates BGP on a router.
• What is the purpose of the BGP keepalive message?
• Which BGP message is used to keep the session alive without exchanging route updates?
• Name the three ways BGP policies can be implemented.
• How does route dampening work and what are its benefits and drawbacks?
• One criterion for being selected as the best BGP route?
• What command is used to configure a BGP peer under the BGP process?
• BGP policy support conforms to which routing paradigm?
• Which BGP attribute is used to indicate the next hop for reachability?
• Name the three well-known mandatory attributes.
• IPv6 MP-BGP security implementation: what is typical and challenging?
• What marks the transition to a fully usable BGP session?
• Which action characterizes the idle state description for BGP?
• What is a key difference between eBGP and iBGP in terms of path propagation and security implications?
• How is the BGP router ID chosen?
• What is sent first after a TCP connection between two BGP routers is established?
• What signal indicates a potential BGP hijack when monitoring for anomalies?
• Open state description: which statement is accurate?
• What are the three basic steps to configuring BGP?
• How was BGP originally intended to be run?
• True or False: A BGP router forms a neighbor relationship with a large number of BGP routers
• When not to use BGP?
• Which address type is commonly used in the BGP neighbor command for iBGP sessions?
• BGP provides reliable delivery via what TCP mechanism?
• How should ROA validation status influence routing decisions?
• What are the BGP neighbor states?
• Which statement about a BGP peer group is correct?
• Which statement best describes the established state outcome?
• What is the main goal of BGP?
• When is the weight attribute used?
• Which event occurs in the open confirm state?
• Which of the following is an example of a non-transit AS?
• Which command defines a peer router and activates a BGP session?
• Which statement best describes how BGP attributes influence path selection?
• What does 'secure by default' imply for BGP operations?
• Which command allows a router to accept BGP connections to external peers residing on networks that are not directly connected?
• Which approach to securing BGP sessions is recommended for new deployments?
• Which services can be used to correlate BGP events to detect hijacks in real time?
• What is a BGP Update message?
• To troubleshoot idle state, which step is recommended?
• What is the Administrative Distance value for eBGP routes?
• To troubleshoot active state, what condition describes the issue?
• Which statement about iBGP neighbor formation is true?
• Name two ways to trigger a BGP update.
• Which command displays the overall status of all BGP connections?
• During a rapid BGP flood, which outcome is achieved by configuring max-prefix limits appropriately?
• What is MED (Multi-Exit Discriminator) and how can misconfiguration impact security or policy?
• True or False: All policies are supported by the hop-by-hop routing paradigm.
• What is TCP-MD5 and when should you enable it on BGP sessions?
• Where do you configure a filter-list in BGP?
• What is a transit AS?
• Which statement best describes a transit AS?
• How does BGP establish an adjacency?
• What information does a path attribute contain?
• BGP is a successor to which protocol?
• Which criterion in BGP route selection causes EBGP routes to be preferred over IBGP routes?
• Which statement about keepalive messages in BGP is true?
• What is the AS-Path attribute?
• Which action is one of the MANRS core actions that helps ensure legitimate BGP sessions are established?
• Name three ways to filter BGP routing updates
• How does BGPsec differ from RPKI in scope and requirements?
• In RPKI, what is a ROA used for?
• Which conditions are required for an iBGP neighbor relationship to form?
• When to use BGP?
• BGP is a successor to an earlier protocol called EGP.
• What differentiates BGP from IGPs?
• In the provided basic eBGP example, which AS numbers are used for R1 and R2?
• What is NLRI?
• What is a recommended practice for per-peer MD5 key rotation in large networks?
• What is the Administrative Distance value for iBGP routes?
• How should Unknown/Not Found ROA status be treated in routing policy?
• True or False: BGP is designed to scale to large connected networks like the Internet.
• Which BGP attribute is used to indicate the origin of the route?
• The Local Preference attribute is classified as which type of BGP attribute?
• How does the use of private AS numbers affect BGP security and advertising on the public Internet?
• True or False: BGP routers use broadcast or multicast with the use of TCP
• Which statement about the BGP next-hop behavior for eBGP is true?