Which of the following would BEST secure the routes while allowing the network to function in the event of a single provider failure?

After a security incident, a network security engineer discovers that a portion of the company’s sensitive external traffic has been redirected through a secondary ISP that is not normally used.

Which of the following would BEST secure the routes while allowing the network to function in the event of a single provider failure?
A . Disable BGP and implement a single static route for each internal network.
B . Implement a BGP route reflector.
C . Implement an inbound BGP prefix list.
D . Disable BGP and implement OSPF.

View Answer

Answer: C

Explanation:

Defenses against BGP hijacks include IP prefix filtering, meaning IP address announcements are sent and accepted only from a small set of well-defined autonomous systems, and monitoring Internet traffic to identify signs of abnormal traffic flows.