Securing Routing Protocols and the Control Plane

Question 1

Control plane packets are handled by what?

Answer 1

CPU

Question 2

Name three functions handled by the control plane?

Answer 2

BGP, RSVP, ICMP

Question 3

Which command provides information on receiving adjacency traffic?

Answer 3

show ip cef

Question 4

Control plane policing helps to protect the CPU by doing what?

Answer 4

Filtering and rate-limiting traffic destined to the control plane

Question 5

In the following CoPP access control list example, which traffic is being prevented from reaching the control plane?
Extended IP access list 123
10 deny tcp 192.168.1.0 0.0.0.255 any eq telnet
20 deny udp 192.168.1.0 0.0.0.255 any eq domain
30 permit tcp any any eq telnet
40 permit udp any any eq domain
50 deny ip any any

Answer 5

Telnet and DNS traffic from outside the 192.168.1.0/24 subnet

Question 6

What subinterfaces can be leveraged as part of control plane protection?

Answer 6

Host subinterface, CEF-Exception subinterface, Transit subinterface

Question 7

Which line in the following OSPF configuration will not be required for MD5 authentication to work?
interface GigabitEthernet0/1
ip address 192.168.10.1 255.255.255.0
ip ospf authentication message-digest
ip ospf message-digest-key 1 md5 CCNA
!
router ospf 65000
router-id 192.168.10.1
area 20 authentication message-digest
network 10.1.1.0 0.0.0.255 area 10
network 192.168.10.0 0.0.0255 area 0
!

Answer 7

area 20 authentication message-digest

Question 8

When configuring MD authentication, router process (only for OSPF) must be configured and key chain in EIGRP

Answer 8

True

Question 9

RIPv2 and EIGRP both make use of a key chain for authentication.

Answer 9

True

Question 10

What is needed to implement MD5 authentication for BGP?

Answer 10

Router process configuration