nerdexam
Cisco

200-155 · Question #230

Which description of Management Plane Protection is true?

The correct answer is C. It restricts the interfaces on which network management packets enter a device. Management Plane Protection (MPP) is a security feature designed to secure a network device's management plane by restricting which interfaces can accept management traffic.

Network Services

Question

Which description of Management Plane Protection is true?

Options

  • AIt allows all of the interfaces to carry management packets
  • BIt allows management packet floods to reach the CPU.
  • CIt restricts the interfaces on which network management packets enter a device
  • DIt supports all of the administrative management protocols

How the community answered

(60 responses)
  • A
    8% (5)
  • B
    3% (2)
  • C
    87% (52)
  • D
    2% (1)

Why each option

Management Plane Protection (MPP) is a security feature designed to secure a network device's management plane by restricting which interfaces can accept management traffic.

AIt allows all of the interfaces to carry management packets

MPP's purpose is to prevent all interfaces from carrying management packets, specifically by allowing only designated interfaces to do so, thus restricting access.

BIt allows management packet floods to reach the CPU.

MPP aims to protect the CPU by preventing unauthorized or excessive management packet floods from reaching it, not by allowing them.

CIt restricts the interfaces on which network management packets enter a deviceCorrect

Management Plane Protection (MPP) isolates management traffic to specific, designated secure interfaces, preventing unauthorized management access or attacks through other interfaces. This mechanism helps protect the device's CPU and management processes from malicious or excessive management packets originating from untrusted network segments.

DIt supports all of the administrative management protocols

While MPP secures management protocols by restricting ingress points, its primary function is interface restriction, not to guarantee support for all administrative management protocols.

Concept tested: Network device security - Management Plane Protection (MPP)

Source: https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3750x_3560x/software/release/12-2_55_se/configuration/guide/3750x_cg/swmpp.html

Topics

#Management Plane Protection#network security#management interfaces#device hardening

Community Discussion

No community discussion yet for this question.

Full 200-155 Practice