The Company XYZ network is experiencing attacks against their router. Which type of Control Plane Protection must be used on the router to protect all control plane IP traffic that is destined…

The Control Plane Protection host subinterface processes all IP traffic destined directly to one of the router's own interface addresses, including routing protocol packets, SSH, SNMP, Telnet, and other management plane traffic. Applying a policy here polices and protects the router itself from control plane attacks targeting its interfaces.

The main interface applies a policy to all aggregated control plane traffic before subinterface classification is performed and is not specific to traffic destined to the router's own interfaces.

The transit subinterface handles traffic that is being software-switched through the router but is not destined for the router itself, which is the opposite of the scenario described.

The CEF-exception subinterface handles packets that cannot be processed by Cisco Express Forwarding such as ARP, ICMP redirects, or IP options packets, not traffic directed at router interfaces.