312-49 · Question #361
Your company uses Cisco routers exclusively throughout the network. After securing the routers to the best of your knowledge, an outside security firm is brought in to assess the network security…
The correct answer is B. Cisco Discovery Protocol. Cisco Discovery Protocol (CDP) is a Cisco-proprietary Layer 2 protocol that automatically broadcasts detailed information about Cisco devices - including model number, IOS version, IP address, and capabilities - to directly connected neighbors. While useful for network…
Question
Your company uses Cisco routers exclusively throughout the network. After securing the routers to the best of your knowledge, an outside security firm is brought in to assess the network security. Although they found very few issues, they were able to enumerate the model, OS version, and capabilities for all your Cisco routers with very little effort. Which feature will you disable to eliminate the ability to enumerate this information on your Cisco routers?
Options
- ASimple Network Management Protocol
- BCisco Discovery Protocol
- CBorder Gateway Protocol
- DBroadcast System Protocol
How the community answered
(22 responses)- B86% (19)
- C5% (1)
- D9% (2)
Explanation
Cisco Discovery Protocol (CDP) is a Cisco-proprietary Layer 2 protocol that automatically broadcasts detailed information about Cisco devices - including model number, IOS version, IP address, and capabilities - to directly connected neighbors. While useful for network management, CDP makes it trivial for an attacker or auditor to enumerate infrastructure details. Disabling CDP on interfaces (especially those facing untrusted networks or end users) with the command 'no cdp enable' or globally with 'no cdp run' removes this information leakage.
Topics
Community Discussion
No community discussion yet for this question.