CCDE: Cisco Certified Design Expert (Practical) — Question 8

Which two data plane hardening techniques are true? (Choose two.)

Answer options

• A. routing protocol authentication
• B. infrastructure ACLs
• C. redundant AAA servers
• D. Control Plane Policing
• E. warning banners
• F. SNMPv3
• G. disable unused services

Correct answer: B, G

Explanation

Infrastructure ACLs (B) help control traffic flowing through a network, enhancing security by filtering unwanted traffic. Disabling unused services (G) reduces the attack surface, minimizing vulnerabilities. The other options either pertain to different layers of network security or are not specifically related to data plane hardening.