What is a design application of control plane policing?

Question

Options

• ACPP protects the control plane from reconnaissance and or denial-of-service attacks
• BCPP protects the forwarding plane by rate -limiting excessive routing protocol traffic
• CCPP protects the forwarding plane by allowing legitimate traffic and dropping excessive traffic
• DCPP drop malformed packet that are sent to the CPU

• A
  87% (26)
• B
  3% (1)
• C
  3% (1)
• D
  7% (2)

Explanation

Control Plane Policing (CoPP) is specifically designed to protect the router/switch CPU (the control plane) from being overwhelmed by malicious or excessive traffic - making A correct: it guards against reconnaissance (e.g., port scans) and DoS attacks aimed at the control plane itself.

Why the distractors are wrong:

• B & C are wrong because CoPP protects the control plane, not the forwarding plane - the forwarding plane is handled by hardware ASICs and mechanisms like QoS or ACLs, not CoPP.
• D is partially plausible but incomplete and mislabeled - while CoPP can drop malicious packets before they reach the CPU, "dropping malformed packets" describes packet sanitization/filtering, not the design application of CoPP. CoPP's primary purpose is rate-limiting and protecting CPU availability, not malformed-packet detection.

Memory tip: Think of CoPP as a bodyguard for the brain - the CPU (control plane) is the brain of the router, and CoPP stands between it and attackers trying to exhaust or probe it. If the answer mentions "forwarding plane," it's automatically wrong for CoPP questions.

No community discussion yet for this question.