Infrastructure Security Flashcards

What is the purpose of Control Plane Policing (CoPP) on a Cisco router?

Answer: Rate-limit traffic destined to the route processor

CoPP protects the router's control plane by rate-limiting or dropping traffic directed to the route processor to prevent DoS attacks.

Which Cisco IOS feature can detect and block rogue DHCP servers on a LAN segment?

Answer: DHCP Snooping

DHCP Snooping filters DHCP messages, trusting only designated ports and blocking rogue DHCP server responses on untrusted ports.

In a Zone-Based Firewall (ZBF), what happens to traffic between two zones that have no zone-pair policy defined?

Answer: Traffic is dropped

In ZBF, traffic between zones is implicitly denied unless a zone-pair with a service policy explicitly permits or inspects it.

What does AAA stand for in Cisco network security?

Answer: Authentication, Authorization, Accounting

AAA stands for Authentication (who you are), Authorization (what you can do), and Accounting (what you did).

Which protocol does Cisco TACACS+ use for transport?

Answer: TCP port 49

TACACS+ uses TCP port 49 for reliable transport and encrypts the entire packet body.

Which feature builds upon DHCP Snooping to prevent hosts from sending traffic with a spoofed source IP?

Answer: IP Source Guard

IP Source Guard uses the DHCP Snooping binding table to filter packets with source IPs that don't match the legitimate binding.