CCDE: Cisco Certified Design Expert (Practical) — Question 79

Company XYZ wants to secure the data plane of their network. Which two technologies can be included in the security design? (Choose two.)

Answer options

• A. BEEP
• B. MPP
• C. DAI
• D. IP Source Guard
• E. CPPr

Correct answer: C, D

Explanation

DAI (Dynamic ARP Inspection) helps prevent ARP spoofing attacks by ensuring that only valid ARP requests and responses are relayed. IP Source Guard restricts IP traffic on untrusted ports, which protects against IP address spoofing. The other options, BEEP, MPP, and CPPr, do not specifically address securing the data plane in the same way.