1.5 Configure and Verify Control Plan Security 350-501 Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   What does BGPsec provide for BGP routes?

   • AFiltering of BGP routes based on communities
   • BOrigin and path validation using digital signatures
   • CAuthentication of BGP peers using MD5
   • DEncryption of BGP updates
   Reveal Solution Discussion Select an answer first
2. 2expert · hard

   A service provider is considering deploying BGPsec to secure inter-AS routing. The provider has a large number of eBGP sessions with customers and upstreams. The provider is concerned about the CPU impact of BGPsec on its edge routers, and also wants to ensure that BGPsec does not interfere with BGP prefix suppression and TTL security. Which statement is true regarding the deployment of BGPsec?

   • ABGPsec is compatible with BGP prefix suppression because it only signs the aggregate route.
   • BBGPsec adds a digital signature to each BGP update, which increases CPU usage on the routers that validate the signatures.
   • CBGPsec does not require any additional key management because it uses the same keys as TCP-AO.
   • DBGPsec replaces the need for BGP TTL security because it authenticates the source of the update.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   What is the purpose of BGP prefix suppression?

   • ATo prevent BGP from accepting routes with a certain community value
   • BTo filter BGP routes based on AS-path attributes
   • CTo limit the number of prefixes advertised to a neighbor by suppressing the advertisement of more specific routes
   • DTo reduce the BGP table size by removing duplicate routes
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which statement correctly describes the difference between Local Packet Transport Services (LPTS) and Control Plane Policing (CoPP) on Cisco IOS XR routers?

   • ALPTS is used only for IPv6 control-plane traffic, while CoPP is used only for IPv4 control-plane traffic.
   • BLPTS is a hardware-based mechanism that polices and rate-limits punted traffic to the control plane, while CoPP is a software-based mechanism that uses ACLs to rate-limit control-plane traffic.
   • CLPTS is configured globally, while CoPP is configured per-interface.
   • DLPTS filters traffic destined to the router's control plane based on MPLS labels, while CoPP filters based on IP addresses.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A service provider is deploying a new MPLS core. The provider wants to secure LDP by ensuring that only authorized routers can exchange label bindings, and that the control plane is protected from excessive LDP traffic. The provider is using IOS XR routers. Which configuration should the provider apply?

   • AConfigure LDP label allocation filtering and use BGP TTL security on the LDP sessions.
   • BEnable LDP session protection and configure a maximum number of LDP neighbors.
   • CConfigure LDP TTL security and apply a CoPP policy for LDP.
   • DConfigure LDP password authentication and apply an LPTS policer for LDP.
   Reveal Solution Discussion Select an answer first