Cisco Exam 350-501 Topic 2 Question 102 Discussion

Actual exam question for Cisco's 350-501 exam

Question #: 102
Topic #: 2

A network architect plans to implement MPLS OAM to provide additional troubleshooting functionality for the NOC team. After analyzing the configuration on the MPLS P/PE nodes, the architect decides to revise the CoPP policies. Which two actions ensure that the new solution is secure? (Choose two.)

AAllow port 3505 in the outbound direction only.

BAllow the ICMP protocol only.

CAllow the TCP and UDP protocols.

DAllow the UDP protocol only.

EAllow port 3503 in the inbound direction only.

Show Suggested Answer

Suggested Answer: B

To mitigate DDoS attacks in a BGP environment, an engineer can apply BGP FlowSpec, which allows for the creation of traffic filtering policies that can be distributed across the network.This configuration enables the network to respond quickly to DDoS attacks by filtering or redirecting malicious traffic based on predefined criteria, such as source IP, destination IP, and port numbers456.

by Manu at Sep 29, 2024, 11:43 PM

Limited Time Offer

25%

Off

Get Premium 350-501 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Bettina

1 months ago

I'm leaning towards A and E. Restricting the specific ports used by MPLS OAM and allowing direction-specific access seems like a good way to secure the solution.

upvoted 0 times

...

Janey

1 months ago

Haha, I bet the architect is regretting not using port 42069 in the configuration. That would have been the ultimate security move!

upvoted 0 times

...

Marshall

2 months ago

I'm not so sure about that. Allowing only ICMP or UDP might not be enough. We should also consider allowing the TCP protocol, since some MPLS OAM tools might use it as well.

upvoted 0 times

Josphine

29 days ago

User 2: Yeah, that makes sense. Let's revise the CoPP policies to allow TCP along with ICMP and UDP.

upvoted 0 times

...

Dalene

1 months ago

User 1: I think we should allow the TCP protocol as well.

upvoted 0 times

...

Delmy

2 months ago

I think we should also allow the UDP protocol only. It can help in ensuring security for the new solution.

upvoted 0 times

...

3 months ago

I think we should allow port 3505 in the outbound direction only.

upvoted 0 times

...