nerdexam
Cisco

352-001 · Question #680

What is a benefit of Control Plane Policing?

The correct answer is C. CPP can protect the control plane from reconnaissance and or denial-of-service attacks. Control Plane Policing (CoPP) is a QoS feature that protects the router's control plane CPU from traffic floods and malicious attacks by rate-limiting inbound traffic destined for the CPU.

Designing Security

Question

What is a benefit of Control Plane Policing?

Options

  • ACPP protects the forwarding plane by allowing legitimate traffic and dropping excessive traffic
  • BCPP protects the forwarding plane by rate-limiting excessive routingprotocol traffic
  • CCPP can protect the control plane from reconnaissance and or denial-of-service attacks
  • DCPP drops malformed packets that are sent to the CPU

How the community answered

(20 responses)
  • B
    5% (1)
  • C
    95% (19)

Why each option

Control Plane Policing (CoPP) is a QoS feature that protects the router's control plane CPU from traffic floods and malicious attacks by rate-limiting inbound traffic destined for the CPU.

ACPP protects the forwarding plane by allowing legitimate traffic and dropping excessive traffic

CoPP protects the control plane, not the forwarding plane; the forwarding plane is handled by hardware ASICs and is not the target of CoPP policies.

BCPP protects the forwarding plane by rate-limiting excessive routingprotocol traffic

CoPP does not operate on the forwarding plane, and limiting it to routing protocol traffic is too narrow - CoPP applies policies to all traffic types sent to the CPU, not just routing protocols.

CCPP can protect the control plane from reconnaissance and or denial-of-service attacksCorrect

CoPP is specifically designed to protect the control plane - the CPU and routing processes - from denial-of-service and reconnaissance attacks by applying traffic policies to traffic destined for the router itself. It classifies traffic into categories and enforces rate limits or drops to prevent CPU exhaustion. This is the primary and most broadly stated benefit of CoPP as defined by Cisco.

DCPP drops malformed packets that are sent to the CPU

Dropping malformed packets is a function of other security features such as IP options filtering or ACLs; CoPP works by rate-limiting or policing traffic volumes to the control plane, not inspecting packet structure.

Concept tested: Control Plane Policing purpose and scope

Source: https://www.cisco.com/c/en/us/support/docs/ip/access-lists/43920-cpp.html

Topics

#CoPP#control plane protection#DoS attack#router security

Community Discussion

No community discussion yet for this question.

Full 352-001 Practice