SEND is described as which of the following?

• A. A standard cryptographic extension for NDP
• B. A cryptographically secure version of NDP
• C. A dynamic address assignment protocol
• D. A firewall enhancement for IPv6

Answer: (B)

SEND provides cryptographic protection for IPv6 Neighbor Discovery, turning NDP into a secure version by adding authentication and address ownership proof. It binds an IPv6 address to a public/private key pair through Cryptographically Generated Addresses and signs NDP messages (such as Neighbor Solicitation, Neighbor Advertisement, and Router Advertisement). Recipients can verify the signature to confirm the sender truly controls the claimed address, which helps prevent spoofing and related attacks on the neighbor discovery process. This is not about dynamic address assignment or firewall features, but about authenticating NDP traffic to protect the IPv6 link layer.