3.2 Management Plane Protection Techniques CCIE-SECURITY Practice Questions (Page 2)

Questions 6–10

1. 6expert · medium

   A network administrator is tuning CoPP on a router that has been experiencing intermittent high CPU utilization. The router runs OSPF and BGP, and the administrator has noticed that during peak traffic, OSPF hello packets are being dropped, causing neighbor flapping. The administrator wants to ensure that OSPF hellos are never dropped while still protecting the CPU from excessive traffic. Which configuration should be applied?

   • ACreate a dedicated CoPP class for OSPF with a high police rate and priority, and set a lower police rate for other control plane traffic.
   • BRemove OSPF from CoPP entirely to avoid any drops.
   • CUse an ACL to permit only OSPF traffic to the control plane.
   • DIncrease the police rate for all control plane traffic to prevent any drops.
   Reveal Solution Discussion Select an answer first
2. 7expert · medium

   A security engineer is designing a solution to protect a network device from memory exhaustion attacks. The device is critical to the network and must remain operational. The engineer wants to implement a solution that automatically takes action when memory usage exceeds a threshold, but also wants to avoid dropping legitimate traffic if possible. Which approach should be taken?

   • AConfigure memory thresholds with a 'drop' action for the highest threshold and a 'log' action for lower thresholds.
   • BSet a single memory threshold that drops all traffic when exceeded.
   • CDisable all non-essential features to reduce memory usage.
   • DUse CoPP to limit all traffic to the control plane.
   Reveal Solution Discussion Select an answer first
4. 8expert · medium

   A network administrator is configuring a router that will be deployed in a high-security environment. The administrator wants to ensure that memory usage is monitored and that the router sends alerts when memory usage is high. The administrator also wants to ensure that only authorized administrators can access the router. Which configuration should be applied?

   • ADisable all management protocols and use only the console port.
   • BConfigure memory thresholds with syslog messages, and enable Telnet for remote access.
   • CEnable SNMPv3 with a single community string, and use console access only.
   • DConfigure memory thresholds with SNMP traps, enable SSH, and configure AAA with RBAC.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A security administrator notices that the control plane CPU utilization on a core router spikes to 90% during a DDoS attack. The administrator has already implemented CoPP but wants to fine-tune the thresholds to minimize CPU impact while ensuring that legitimate routing protocol traffic is not dropped. What should the administrator do?

   • AIncrease the police rate for the routing protocol class to ensure it is never dropped.
   • BSet a higher priority and a higher police rate for the routing protocol class, and lower rates for less critical classes.
   • CRemove the routing protocol class from CoPP to avoid any impact.
   • DLower the police rate for the routing protocol class to reduce CPU load.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A network engineer is configuring a new switch that will be used in a high-security environment. The engineer is concerned about memory exhaustion attacks that could cause the switch to become unstable. Which action should the engineer take to protect the switch's memory?

   • AEnable memory thresholding to monitor and limit memory usage, and configure alerts when thresholds are exceeded.
   • BUse CoPP to limit all traffic to the control plane.
   • CDisable all unnecessary services to reduce memory usage.
   • DIncrease the switch's physical memory by adding more RAM.
   Reveal Solution Discussion Select an answer first