352-001 · Question #502
Which two benefits are of protecting the control plane of a network device? (Choose two.)
The correct answer is A. Increases the reliability, security, and availability of the network B. Protects against DoS attacks targeted at the network infrastructure. Protecting the network device control plane preserves routing stability and guards the device CPU from being overwhelmed by attack traffic directed at the infrastructure itself.
Question
Which two benefits are of protecting the control plane of a network device? (Choose two.)
Options
- AIncreases the reliability, security, and availability of the network
- BProtects against DoS attacks targeted at the network infrastructure
- CSeparates attack traffic from normal network traffic
- DProtects data flowing through devices
How the community answered
(43 responses)- A88% (38)
- C5% (2)
- D7% (3)
Why each option
Protecting the network device control plane preserves routing stability and guards the device CPU from being overwhelmed by attack traffic directed at the infrastructure itself.
The control plane handles routing protocol updates, management plane traffic, and device health functions; securing it with mechanisms like Control Plane Policing (CoPP) prevents CPU exhaustion and keeps the network reliable, secure, and available even under attack conditions.
Control plane protection specifically guards against DoS attacks directed at the router or switch CPU itself - such as floods of routing protocol packets, excessive ICMP, or crafted management traffic - which are targeted at network infrastructure devices rather than end hosts.
Separating attack traffic from normal user traffic is a function performed by traffic scrubbing centers, IPS/IDS, or ACLs at the data plane level, not by control plane protection.
Data flowing through devices traverses the data plane (forwarding plane); control plane protection does not inspect or secure transit user data packets.
Concept tested: Control plane policing (CoPP) benefits and purpose
Source: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_data_plane_protection/configuration/xe-16/sec-data-plane-protection-xe-16-book/sec-ctrl-plane-policing.html
Topics
Community Discussion
No community discussion yet for this question.