What is the primary purpose of Control Plane Policing (CoPP) on a network device?

To protect the control plane by rate-limiting traffic destined to the route processor

To prioritize data plane traffic over control plane traffic

To encrypt all traffic between the control plane and data plane

To provide redundancy for the control plane in case of hardware failure

What is the effect of disabling IP source routing on a router?

The router will ignore packets with source routing options and forward them normally

The router will stop routing all traffic

The router will drop all packets that have any IP options

The router will require authentication for all packets

What is the purpose of Infrastructure Access Control Lists (iACLs)?

To block all traffic from the internet

To filter traffic between different user VLANs

To encrypt traffic between routers

To filter traffic that is destined to the network infrastructure devices themselves

Which traffic should an iACL typically permit to reach a router's infrastructure?

All TCP traffic from any source

All ICMP traffic from any source

SSH and routing protocol traffic from trusted sources

When designing an iACL, what is the recommended approach for the final statements?

Explicitly deny all other traffic destined to the infrastructure

Permit all traffic to ensure connectivity

Permit only ICMP to allow troubleshooting

Use a remark to note that the ACL is complete

CCIE Security

Domain 3Objective 1

3.1 Device Hardening Techniques and Control Plane Protection Methods CCIE-SECURITY Practice Questions (Page 1)

Part of the 3.0 Security Infrastructure domain, which accounts for 15% of the CCIE-SECURITY exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 1–1 from this objective — we provide 36 practice questions to prepare you well beyond it. (estimate)

36questions here

8free pages

8concepts

15%of the exam

Questions 1–5

1foundation · easy
What is the primary purpose of Control Plane Policing (CoPP) on a network device?
Select an answer first
2foundation · easy
What is the effect of disabling IP source routing on a router?
Select an answer first
3foundation · easy
What is the purpose of Infrastructure Access Control Lists (iACLs)?
Select an answer first
4foundation · easy
Which traffic should an iACL typically permit to reach a router's infrastructure?
Select an answer first
5foundation · easy
When designing an iACL, what is the recommended approach for the final statements?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCIE-SECURITY

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “CCIE-SECURITY” is a trademark of its owner, used for identification only.