200-155 · Question #230
Which description of Management Plane Protection is true?
The correct answer is C. It restricts the interfaces on which network management packets enter a device. Management Plane Protection (MPP) is a security feature designed to secure a network device's management plane by restricting which interfaces can accept management traffic.
Question
Which description of Management Plane Protection is true?
Options
- AIt allows all of the interfaces to carry management packets
- BIt allows management packet floods to reach the CPU.
- CIt restricts the interfaces on which network management packets enter a device
- DIt supports all of the administrative management protocols
How the community answered
(60 responses)- A8% (5)
- B3% (2)
- C87% (52)
- D2% (1)
Why each option
Management Plane Protection (MPP) is a security feature designed to secure a network device's management plane by restricting which interfaces can accept management traffic.
MPP's purpose is to prevent all interfaces from carrying management packets, specifically by allowing only designated interfaces to do so, thus restricting access.
MPP aims to protect the CPU by preventing unauthorized or excessive management packet floods from reaching it, not by allowing them.
Management Plane Protection (MPP) isolates management traffic to specific, designated secure interfaces, preventing unauthorized management access or attacks through other interfaces. This mechanism helps protect the device's CPU and management processes from malicious or excessive management packets originating from untrusted network segments.
While MPP secures management protocols by restricting ingress points, its primary function is interface restriction, not to guarantee support for all administrative management protocols.
Concept tested: Network device security - Management Plane Protection (MPP)
Source: https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3750x_3560x/software/release/12-2_55_se/configuration/guide/3750x_cg/swmpp.html
Topics
Community Discussion
No community discussion yet for this question.