4.3

Question 1

Control Plane policing

Answer 1

Allows users to configure a quality of service filter that manages the traffic flow of control plane packets the protect the control plan of Cisco iOS routers and switches against reconnaissance and dos attacks. This helps to protect the control plane while maintaining packet forwarding and protocol states despite an attack or heavy traffic load on the router or switch.

Question 2

DHCP snooping

Question 3

Explicit deny firewall

Question 4

Firewall implicit deny