S switch V600R022 version, regarding the IPV6 RGuard implementation description, the incorrect one is ().

S switch V600R022 version, regarding the IPV6 RGuard implementation description, the incorrect one is ().
A . RA messages can carry a lot of network configuration information, including key network configuration information such as the default router, network prefix list, and whether to use a DHCPv6 server for stateful address allocation. The attacker modifies the network configuration of the user’s host by sending forged RA messages, making it impossible for legitimate users to communicate normally. IPv6 RGuard provides a defense mechanism against RA message attacks, which can effectively prevent such network attacks.
B . Configure the user (host) or router (router) role for the interface, and the device then chooses to forward or discard RA messages based on the interface role.
C . If it is determined that the interface is connected to a user host, configure the interface role as user (host); if it is determined that the interface is connected to a router, the administrator can configure the interface role as router (router) according to the interface in the network. Version 22.0 also supports policy-based filtering of ND packets.
D . Version 22.0 also supports policy-based filtering of nd packets.

Answer: D