A service provider is configuring a new eBGP peering with a customer. The security policy requires that BGP sessions be protected from spoofed packets and that the control plane be protected from excessive BGP traffic. The customer's router is directly connected. Which configuration should be applied?

Enable BGP MD5 authentication only.

Enable BGP TTL security and configure a CoPP policy for BGP traffic.

Configure BGP prefix suppression.

A service provider is troubleshooting an LDP issue in its MPLS core. The provider has configured LDP authentication on all routers, but some LDP sessions are not establishing. The provider also wants to ensure that the control plane is protected from excessive LDP traffic. Which troubleshooting step should the provider take first?

Check the LPTS policers to ensure that they are not dropping LDP packets.

Verify that the LDP password is configured consistently on both ends of the session.

Verify that BGP TTL security is not interfering with LDP.

Check the LDP label allocation filter to ensure that the correct prefixes are allowed.

A service provider is experiencing DDoS attacks that target specific IP prefixes. The team wants to propagate traffic filtering rules to edge routers automatically and also protect the control plane from the attack traffic. Which solution should be used?

Use BGP Flowspec to propagate filtering rules and configure CoPP to protect the control plane.

A service provider is mitigating a DDoS attack by propagating filtering rules to edge routers. The team also wants to reduce the number of BGP prefixes advertised to a specific peer. Which solution should be used?

Use CoPP to police BGP traffic.

Use BGP Flowspec for filtering rules and BGP prefix suppression for the peer.

Use BGP prefix suppression only.

CiscoCertified Network Professional Service Provider

Domain 1Objective 5

1.5 Configure and Verify Control Plan Security 350-501 Practice Questions (Page 4)

Part of the Architecture domain, which accounts for 15% of the 350-501 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 1–2 from this objective — we provide 28 practice questions to prepare you well beyond it. (estimate)

28questions here

6free pages

6concepts

15%of the exam

Questions 16–20

16foundation · easy
Which BGP address family is used to carry Flowspec routes?
Select an answer first
17application · medium
A service provider is configuring a new eBGP peering with a customer. The security policy requires that BGP sessions be protected from spoofed packets and that the control plane be protected from excessive BGP traffic. The customer's router is directly connected. Which configuration should be applied?
Select an answer first
18expert · hard
A service provider is troubleshooting an LDP issue in its MPLS core. The provider has configured LDP authentication on all routers, but some LDP sessions are not establishing. The provider also wants to ensure that the control plane is protected from excessive LDP traffic. Which troubleshooting step should the provider take first?
Select an answer first
19application · medium
A service provider is experiencing DDoS attacks that target specific IP prefixes. The team wants to propagate traffic filtering rules to edge routers automatically and also protect the control plane from the attack traffic. Which solution should be used?
Select an answer first
20application · medium
A service provider is mitigating a DDoS attack by propagating filtering rules to edge routers. The team also wants to reduce the number of BGP prefixes advertised to a specific peer. Which solution should be used?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 350-501

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-501” is a trademark of its owner, used for identification only.

1.5 Configure and Verify Control Plan Security 350-501 Practice Questions (Page 4)

Questions 16–20

Which BGP address family is used to carry Flowspec routes?

A service provider is experiencing DDoS attacks that target specific IP prefixes. The team wants to propagate traffic filtering rules to edge routers automatically and also protect the control plane from the attack traffic. Which solution should be used?

A service provider is mitigating a DDoS attack by propagating filtering rules to edge routers. The team also wants to reduce the number of BGP prefixes advertised to a specific peer. Which solution should be used?

Keep studying — Architecture