CCDE: Cisco Certified Design Expert (Practical) — Question 6

Which three items do you recommend for control plane hardening of an infrastructure device? (Choose three.)

Answer options

• A. SNMPv3
• B. warning banners
• C. routing protocol authentication
• D. redundant AAA servers
• E. to enable unused services
• F. Control Plane Policing

Correct answer: A, C, F

Explanation

The correct options, SNMPv3, routing protocol authentication, and Control Plane Policing, provide critical security enhancements to the control plane by ensuring secure management, verifying the authenticity of routing messages, and controlling traffic flow. In contrast, warning banners do not enhance security, redundant AAA servers improve availability rather than hardening, and enabling unused services poses a security risk rather than mitigating it.