Exam 400-007 All Questions

View all questions & answers for the 400-007 exam

Exam 400-007 topic 1 question 213 discussion

Actual exam question from Cisco's 400-007

Question #: 213
Topic #: 1

The Layer 3 control plane is the intelligence over the network that steers traffic toward its intended destination. Which two techniques can be used in service provider-style networks to offer a more dynamic, flexible, controlled, and secure control plane design? (Choose two.)

A. QoS policy propagation with BGP
B. remote black-holing trigger
C. prefix lists
D. access control lists
E. firewalls

Show Suggested Answer

Suggested Answer: BC 🗳️

by markmark1983 at Feb. 3, 2023, 4:06 a.m.

Comments

Submit Cancel

Devsin2000

4 months ago

Selected Answer: AD

Common mechanisms to protect control plane include iACLs, routing protection, and control plane policing (CoPP). Common mechanisms to protect Data plane include infrastructure ACLs (iACLs), QoS toolset, remotely triggered black hole (RTBH), and Unicast Reverse Path Forwarding (uRPF).

upvoted 1 times

...

sandccie

4 months, 2 weeks ago

Selected Answer: AB

A&B. RBHT is obvious. QPPB enables routers to deprioritize or drop malicious traffic that classified by BGP attributes (such as prefixes, as-paths, or communities). Prefix list alone does not achieve security.

upvoted 1 times

...

kalulosu

5 months, 1 week ago

Selected Answer: あイ

I think correct ans are A and B. The Cisco Press CCDE text contains the following statement. typical static filtering mechanisms, such as using ACLs or prefix lists.

upvoted 2 times

...

Rollizo

11 months, 1 week ago

Selected Answer: BC

RTBH+Prefix-list

upvoted 1 times

...

cciesuperhero

1 year, 2 months ago

Selected Answer: BC

I ruled out A

upvoted 2 times

...

biddid2

1 year, 9 months ago

Where is Q214-216? I purchased another dump that has 267 questions. Seems missing some questions here.

upvoted 3 times

...

pizdecvsemu

1 year, 9 months ago

Selected Answer: AB

I think it's A and B. Good link with example on how both used: https://blog.pierky.com/gns3-labs-bgp-triggered-rate-limiting-and-less-than-best-effort-lbe-with-qppb/

upvoted 2 times

pizdecvsemu

1 year, 9 months ago

I'm wrong about A, it's not good for "steers traffic toward its intended destination". I guess RTBH and PLs.

upvoted 1 times

...

markmark1983

1 year, 11 months ago

how does prefix-list secure control plane dsign?

upvoted 2 times

biddid2

1 year, 9 months ago

Prefix-list is used to protect your server which is the destination. e.g. ip community-list standard blackhole permit 65535:666 route-map blackhole-in permit 20 match community blackhole match ip address (prefix-list) set ip next-hop 192.0.2.1

upvoted 1 times

...

ying162

1 year, 10 months ago

Read on RTBH then you will understand. They work hand in hand

upvoted 2 times

...