352-001 · Question #680
What is a benefit of Control Plane Policing?
The correct answer is C. CPP can protect the control plane from reconnaissance and or denial-of-service attacks. Control Plane Policing (CoPP) is a QoS feature that protects the router's control plane CPU from traffic floods and malicious attacks by rate-limiting inbound traffic destined for the CPU.
Question
What is a benefit of Control Plane Policing?
Options
- ACPP protects the forwarding plane by allowing legitimate traffic and dropping excessive traffic
- BCPP protects the forwarding plane by rate-limiting excessive routingprotocol traffic
- CCPP can protect the control plane from reconnaissance and or denial-of-service attacks
- DCPP drops malformed packets that are sent to the CPU
How the community answered
(20 responses)- B5% (1)
- C95% (19)
Why each option
Control Plane Policing (CoPP) is a QoS feature that protects the router's control plane CPU from traffic floods and malicious attacks by rate-limiting inbound traffic destined for the CPU.
CoPP protects the control plane, not the forwarding plane; the forwarding plane is handled by hardware ASICs and is not the target of CoPP policies.
CoPP does not operate on the forwarding plane, and limiting it to routing protocol traffic is too narrow - CoPP applies policies to all traffic types sent to the CPU, not just routing protocols.
CoPP is specifically designed to protect the control plane - the CPU and routing processes - from denial-of-service and reconnaissance attacks by applying traffic policies to traffic destined for the router itself. It classifies traffic into categories and enforces rate limits or drops to prevent CPU exhaustion. This is the primary and most broadly stated benefit of CoPP as defined by Cisco.
Dropping malformed packets is a function of other security features such as IP options filtering or ACLs; CoPP works by rate-limiting or policing traffic volumes to the control plane, not inspecting packet structure.
Concept tested: Control Plane Policing purpose and scope
Source: https://www.cisco.com/c/en/us/support/docs/ip/access-lists/43920-cpp.html
Topics
Community Discussion
No community discussion yet for this question.