About DDOS attack .What you can do on device to block DDOS attack ?

Question

Options

• APolicy map
• BACL
• CControl plane policy
• DUsed zoned firewall on router

• A
  4% (1)
• B
  7% (2)
• C
  85% (23)
• D
  4% (1)

Explanation

Control Plane Policing (CoPP) is the primary mechanism to protect a router or switch's CPU and control plane from DDoS attacks. The control plane handles routing protocol traffic, management traffic (SSH, SNMP), and other traffic destined for the router itself. Without CoPP, a flood of packets targeting the control plane can overwhelm the CPU, causing routing protocol failures and outages. CoPP uses policy-map constructs to classify and rate-limit traffic sent to the control plane, effectively mitigating DDoS attacks on the device itself. While ACLs (B) can filter specific traffic and a zone-based firewall (D) protects traffic passing through the router, neither specifically rate-limits traffic destined to the router's CPU the way CoPP does. A policy-map (A) alone is just a component used within CoPP, not the complete solution.

No community discussion yet for this question.