policy-map type inspect ipv6 IPv6-map match header routing-type range 0 255 drop class-map outside-class match any polic

[answerhappygod]

policy-map type inspect ipv6 IPv6-map
match header routing-type range 0 255
drop
class-map outside-class
match any
policy-map outside-policy
class outside-class
inspect ipv6 IPv6-map
service-policy outside-policy interface outside
Refer to the exhibit.

Given the Cisco ASA configuration above, which commands need to be added in order for the Cisco ASA appliance to deny all IPv6 packets with more than three extension headers?

Policy Map Type 1 (77.92 KiB) Viewed 49 times

A. policy-map type inspect ipv6 IPv6-map match ipv6 header count > 3
B. policy-map outside-policy class outside-class inspect ipv6 header count gt 3
C. class-map outside-class match ipv6 header count greater 3
D. policy-map type inspect ipv6 IPv6-map match header count gt 3