* C (Class-Based Weighted Fair Queuing - CBWFQ): CBWFQ allows assigning bandwidth limits (in this case, 2 Mbps) to specific traffic classes, effectively controlling scavenger traffic without dropping excess packets unnecessarily.
Other options explained:
* A: Policing drops excess traffic immediately rather than queuing.
* B: LLQ is for delay-sensitive traffic, not scavenger control.
* D: Shaping is useful but typically applied at interface level, not specific traffic classes.

Unicast Reverse Path Forwarding (uRPF)is a security feature that helps mitigate IP spoofing attacks. It checks whether the source of a packet received on an interface matches the best return path to that source in the routing table.
* Strict Mode (C):Ensures the source IP address of a packet is reachable via the same interface on which the packet was received. This prevents forged source IP addresses from traversing the network, which is essential in defending against outbound DDoS attacks sourced from infected hosts.
* Loose Mode (B):Only verifies that the source IP exists in the routing table (less strict), which might still allow spoofing in multi-homed or asymmetric environments.
uRPF strict mode is the best fit in secure environments with symmetric routing-commonly in enterprise edge or distribution layers.