What is the primary purpose of unicast Reverse Path Forwarding (uRPF) on a Cisco router?

To verify that the source address of an incoming packet is reachable via the interface on which it was received

To filter traffic based on the destination address using access control lists

To encrypt all traffic entering an interface to prevent eavesdropping

To load-balance traffic across multiple equal-cost paths

How can QoS policing be used to mitigate a denial-of-service (DoS) attack?

By rate-limiting traffic to a specific destination to prevent overwhelming the target

By encrypting traffic to the target to make it unreadable

By blocking all traffic to the target permanently

By increasing the bandwidth of the target's link

What is the purpose of applying QoS policies to protect the control plane of a router?

To rate-limit or drop unwanted traffic destined to the router's CPU

To filter routing updates based on source IP

To encrypt control plane traffic

To increase the router's forwarding performance

Which Cisco feature is specifically designed to protect the control plane using QoS policies?

Unicast Reverse Path Forwarding (uRPF)

What is the primary purpose of Remotely Triggered Black Hole (RTBH) filtering?

To encrypt traffic to a specific destination

To drop traffic destined to a specific IP address or prefix at the network edge to mitigate DDoS attacks

To rate-limit traffic to a specific destination

To redirect traffic to a honeypot for analysis

CCIE Security

Domain 3Objective 3

3.3 Data Plane Protection Techniques CCIE-SECURITY Practice Questions (Page 1)

Part of the 3.0 Security Infrastructure domain, which accounts for 15% of the CCIE-SECURITY exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 1–1 from this objective — we provide 38 practice questions to prepare you well beyond it. (estimate)

38questions here

8free pages

9concepts

15%of the exam

Questions 1–5

1foundation · easy
What is the primary purpose of unicast Reverse Path Forwarding (uRPF) on a Cisco router?
Select an answer first
2foundation · easy
How can QoS policing be used to mitigate a denial-of-service (DoS) attack?
Select an answer first
3foundation · easy
What is the purpose of applying QoS policies to protect the control plane of a router?
Select an answer first
4foundation · easy
Which Cisco feature is specifically designed to protect the control plane using QoS policies?
Select an answer first
5foundation · easy
What is the primary purpose of Remotely Triggered Black Hole (RTBH) filtering?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCIE-SECURITY

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “CCIE-SECURITY” is a trademark of its owner, used for identification only.