8.3 Implement Control Plane ACLs on the Controller 300-430 Practice Questions (Page 5)

Questions 21–23

1. 21application · medium

   A company's wireless network has experienced a denial-of-service attack targeting the WLC's control plane, causing APs to disconnect and management access to become unresponsive. The security team wants to prevent such attacks in the future by limiting traffic that can reach the control plane. What is the primary purpose of implementing a Control Plane ACL in this situation?

   • ATo filter traffic destined to the controller's control plane, allowing only necessary protocols and sources
   • BTo encrypt management traffic between the controller and administrators
   • CTo rate-limit all traffic entering the controller to prevent CPU overload
   • DTo block all traffic from the internet to the controller's data plane
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A network team is deploying a new Cisco 9800 controller and wants to implement a Control Plane ACL to protect the control plane from unwanted traffic. The ACL must allow only necessary protocols: HTTPS, SSH, SNMP, and CAPWAP from the management subnet. The engineer has created the ACL and applied it to the control plane. What is the next step to ensure the ACL is working as intended?

   • AReboot the controller to apply the ACL changes.
   • BRemove the ACL from the control plane to avoid any impact.
   • CMonitor the ACL hit counts and verify that legitimate traffic is permitted and unwanted traffic is dropped.
   • DApply the ACL to every interface on the controller.
   Reveal Solution Discussion Select an answer first
3. 23application · medium

   A security audit reveals that the wireless controller's control plane is receiving excessive unwanted traffic, including probes and scans from the network. The controller's CPU utilization is high, affecting wireless services. The engineer needs to mitigate this without disrupting legitimate management and CAPWAP traffic. What should the engineer do?

   • AImplement a Control Plane ACL to permit only necessary traffic and deny the rest.
   • BIncrease the controller's CPU priority to handle more traffic.
   • CMove the controller to a different VLAN with less traffic.
   • DDisable all management protocols to reduce traffic.
   Reveal Solution Discussion Select an answer first