After an incident caused by a DDOS attack on a router, an engineer must ensure that the router is accessible and protected from future attacks without making any changes to traffic passing through…

The correct answer is D. control plane policing. Control Plane Policing (CoPP) is specifically designed to protect the router's control plane (CPU) from flooding and DoS/DDoS attacks by rate-limiting traffic destined TO the router itself, without touching transit traffic passing THROUGH it. Zone-based policy firewalls and…

Security Services

Question

After an incident caused by a DDOS attack on a router, an engineer must ensure that the router is accessible and protected from future attacks without making any changes to traffic passing through the router. Which security function can be utilized to protect the router?

Options

Azone-based policy firewall
Baccess control lists
Cclass maps
Dcontrol plane policing

How the community answered

(29 responses)

A
14% (4)
B
3% (1)
C
10% (3)
D
72% (21)

Explanation

Control Plane Policing (CoPP) is specifically designed to protect the router's control plane (CPU) from flooding and DoS/DDoS attacks by rate-limiting traffic destined TO the router itself, without touching transit traffic passing THROUGH it. Zone-based policy firewalls and ACLs inspect or filter transit traffic, which violates the 'no changes to traffic passing through' requirement. Class maps are just classification objects, not a standalone security function. CoPP is the purpose-built tool to shield the router's CPU from attack while leaving forwarded traffic unaffected.

Topics

#CoPP#control plane policing#DDoS protection#router security

Community Discussion

No community discussion yet for this question.

Full 300-320 Practice