Which of these is a configurable Cisco IOS feature that triggers notifications if an attack attempts to exhaust critical router resources and if preventative controls have been bypassed or are not…

Question

Options

• AControl Plane Protection
• BManagement Plane Protection
• CCPU and memory thresholding
• DSNMPv3

• A
  90% (52)
• B
  3% (2)
• C
  2% (1)
• D
  5% (3)

Explanation

Control Plane Protection (CPP) is a Cisco IOS feature specifically designed to protect the router's control plane - the component responsible for routing protocols, management functions, and system processes - and can be configured to generate alerts when traffic patterns suggest an attack is attempting to exhaust these critical resources. Crucially, it is framed as a detective control that triggers notifications when attacks bypass or circumvent other preventive measures, making it a second-line defense mechanism.

Why the distractors are wrong:

• B (Management Plane Protection) restricts which interfaces accept management traffic (SSH, Telnet, SNMP) but does not monitor resource exhaustion or generate attack-triggered notifications.
• C (CPU and Memory Thresholding) does send alerts when resource thresholds are crossed, but it is a general-purpose monitoring tool - it lacks the attack-awareness context and is not tied to detecting bypassed security controls.
• D (SNMPv3) is a secure transport protocol for network management data, not a detection or notification feature for attacks.

Memory tip: Remember CPP as the control plane's "alarm system" - while other features (like ACLs or rate-limiting) are the locks on the door, CPP is what calls the police when those locks are picked. The exam often tests whether you distinguish detection/notification features from preventive ones.

No community discussion yet for this question.