nerdexam
Cisco

352-001 · Question #502

Which two benefits are of protecting the control plane of a network device? (Choose two.)

The correct answer is A. Increases the reliability, security, and availability of the network B. Protects against DoS attacks targeted at the network infrastructure. Protecting the network device control plane preserves routing stability and guards the device CPU from being overwhelmed by attack traffic directed at the infrastructure itself.

Designing Security

Question

Which two benefits are of protecting the control plane of a network device? (Choose two.)

Options

  • AIncreases the reliability, security, and availability of the network
  • BProtects against DoS attacks targeted at the network infrastructure
  • CSeparates attack traffic from normal network traffic
  • DProtects data flowing through devices

How the community answered

(43 responses)
  • A
    88% (38)
  • C
    5% (2)
  • D
    7% (3)

Why each option

Protecting the network device control plane preserves routing stability and guards the device CPU from being overwhelmed by attack traffic directed at the infrastructure itself.

AIncreases the reliability, security, and availability of the networkCorrect

The control plane handles routing protocol updates, management plane traffic, and device health functions; securing it with mechanisms like Control Plane Policing (CoPP) prevents CPU exhaustion and keeps the network reliable, secure, and available even under attack conditions.

BProtects against DoS attacks targeted at the network infrastructureCorrect

Control plane protection specifically guards against DoS attacks directed at the router or switch CPU itself - such as floods of routing protocol packets, excessive ICMP, or crafted management traffic - which are targeted at network infrastructure devices rather than end hosts.

CSeparates attack traffic from normal network traffic

Separating attack traffic from normal user traffic is a function performed by traffic scrubbing centers, IPS/IDS, or ACLs at the data plane level, not by control plane protection.

DProtects data flowing through devices

Data flowing through devices traverses the data plane (forwarding plane); control plane protection does not inspect or secure transit user data packets.

Concept tested: Control plane policing (CoPP) benefits and purpose

Source: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_data_plane_protection/configuration/xe-16/sec-data-plane-protection-xe-16-book/sec-ctrl-plane-policing.html

Topics

#control plane protection#DoS mitigation#network security#infrastructure security

Community Discussion

No community discussion yet for this question.

Full 352-001 Practice