300-410 ENARSI: Implementing Cisco Enterprise Advanced Routing and ServicesDemo

By Cisco · Question Mode

QuestionQ610

Infrastructure Security

While configuring Control Plane Policing on a router to protect it against malicious traffic, an engineer notices that the configured routing protocols begin flapping on the device.

Which Control Plane Policy action prevents this issue in a production environment while still meeting the security objective?

  • A Set the conform-action and exceed-action to transmit initially to test the ACLs and transmit rates and apply the Control Plane Policy in the output direction.
  • B Set the conform-action and exceed-action to transmit initially to test the ACLs and transmit rates and apply the Control Plane Policy in the input direction.
  • C Set the conform-action to transmit and exceed-action to drop to test the ACLs and transmit rates and apply the Control Plane Policy in the input direction.
  • D Set the conform-action to transmit and exceed-action to drop to test the ACLs and transmit rates and apply the Control Plane Policy in the output direction.
Explanation

Initial CoPP validation should transmit both conforming and exceeding traffic so an incorrect ACL match or undersized policer does not drop routing-protocol packets and disrupt adjacencies. Applying the policy in the control-plane input direction protects the route processor because packets punted from the forwarding plane enter the control plane in that direction.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!