A router that acts as an Internet border gateway has multiple upstream connections that are used
in a load-sharing setup. The NOC has identified a DDoS attack from a specific source entering its
network via interface GigabitEthernet0/1.
The NOC wants to block this suspicious traffic on the border router in a scalable way and without
major changes to the different interface configurations.
Which configuration would block the DDoS attack from the known source (194.90.1.5)?
A.
interface GigabitEthernet0/1ip address 192.168.1.1 255.255.255.252ip verify unicast source
reachable-via any!ip route 194.90.1.5 255.255.255.255 Null0
B.
interface GigabitEthernet0/1ip address 192.168.1.1 255.255.255.252ip verify unicast source
reachable-via any!ip route 194.90.1.5 255.255.255.255 192.168.1.2
C.
interface GigabitEthernet0/1ip address 192.168.1.1 255.255.255.252ip verify unicast source
reachable-via rx!ip route 194.90.1.5 255.255.255.255 Null0
D.
interface GigabitEthernet0/1ip address 192.168.1.1 255.255.255.252ip verify unicast source
reachable-via rx!ip route 194.90.1.5 255.255.255.255 192.168.1.2