CCIE Security Exam: CoPP Policing for Traffic

CCIE Security Exam: CoPP Policing

Prev Question Next Question

Question

Which three types of traffic are generally policed via CoPP policies? (Choose three.)

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D. E.

BDE.

Control Plane Policing (CoPP) is a security mechanism that helps to protect the control plane of network devices, which includes routing protocols, management protocols, and other critical control plane traffic. CoPP uses a set of policies to police or limit the rate of traffic that is destined to the control plane, which helps to prevent Denial of Service (DoS) attacks and other types of security threats.

The three types of traffic that are generally policed via CoPP policies are:

  1. Routing protocol traffic - Routing protocol traffic is critical for the proper functioning of a network, and it is typically policed to prevent malicious or excessive traffic from consuming resources on the control plane.

  2. Traffic from a management protocol such as Telnet or SNMP - Management traffic is used to configure and monitor network devices, and it can also be used to launch attacks against the control plane. CoPP policies can be used to police management traffic to prevent unauthorized access or DoS attacks.

  3. IPsec traffic - IPsec is a security protocol that is used to secure communications between devices. CoPP policies can be used to police IPsec traffic to prevent DoS attacks or other types of security threats.

The other answer options are:

A. Transit traffic - Transit traffic is typically forwarded through the device and does not directly impact the control plane. Therefore, it is not generally policed via CoPP policies.

D. Traffic that is destined to any of the device's interfaces - Traffic that is destined to the device's interfaces is typically forwarded through the data plane and does not directly impact the control plane. Therefore, it is not generally policed via CoPP policies.

Therefore, the correct answers are B, C, and E.