What is the first step in configuring CoPP?

Define a policy map with police actions

Apply the policy map to the control plane

Create a class map to classify control plane traffic

Enable CoPP globally on the router

Which command is used to verify the CoPP policy applied to the control plane?

show running-config | include copp

What does the 'show policy-map control-plane' command display that is crucial for monitoring CoPP?

The number of packets dropped and conformed for each class

The routing table of the device

The MAC address table of the device

The CPU utilization of the device

What is IP source routing?

A feature that allows a packet to specify the path it takes through the network

A method to hide the source IP address of a packet

A technique to translate private IP addresses to public ones

A protocol for dynamically routing packets based on source address

Why is IP source routing considered a security risk?

It increases the CPU load on routers due to encryption

It can be used to bypass access control lists and redirect traffic through unexpected paths

It allows attackers to spoof MAC addresses easily

It automatically enables remote access to the router

CCIE Security

Domain 3Objective 1

3.1 Device Hardening Techniques and Control Plane Protection Methods CCIE-SECURITY Practice Questions (Page 3)

Part of the 3.0 Security Infrastructure domain, which accounts for 15% of the CCIE-SECURITY exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 1–1 from this objective — we provide 36 practice questions to prepare you well beyond it. (estimate)

36questions here

8free pages

8concepts

15%of the exam

Questions 11–15

11foundation · easy
What is the first step in configuring CoPP?
Select an answer first
12foundation · easy
Which command is used to verify the CoPP policy applied to the control plane?
Select an answer first
13foundation · easy
What does the 'show policy-map control-plane' command display that is crucial for monitoring CoPP?
Select an answer first
14foundation · easy
What is IP source routing?
Select an answer first
15foundation · easy
Why is IP source routing considered a security risk?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCIE-SECURITY

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “CCIE-SECURITY” is a trademark of its owner, used for identification only.