Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Cisco 350-501 Exam - Topic 2 Question 102 Discussion

A network architect plans to implement MPLS OAM to provide additional troubleshooting functionality for the NOC team. After analyzing the configuration on the MPLS P/PE nodes, the architect decides to revise the CoPP policies. Which two actions ensure that the new solution is secure? (Choose two.)
B) Allow the ICMP protocol only.
A) Allow port 3505 in the outbound direction only.
C) Allow the TCP and UDP protocols.
D) Allow the UDP protocol only.
E) Allow port 3503 in the inbound direction only.

Cisco 350-501 Exam - Topic 2 Question 102 Discussion

Actual exam question for Cisco's 350-501 exam
Question #: 102
Topic #: 2
[All 350-501 Questions]

A network architect plans to implement MPLS OAM to provide additional troubleshooting functionality for the NOC team. After analyzing the configuration on the MPLS P/PE nodes, the architect decides to revise the CoPP policies. Which two actions ensure that the new solution is secure? (Choose two.)

Show Suggested Answer Hide Answer
Suggested Answer: B

To mitigate DDoS attacks in a BGP environment, an engineer can apply BGP FlowSpec, which allows for the creation of traffic filtering policies that can be distributed across the network.This configuration enables the network to respond quickly to DDoS attacks by filtering or redirecting malicious traffic based on predefined criteria, such as source IP, destination IP, and port numbers456.


by Manu at Sep 29, 2024, 11:43 PM

Limited Time Offer

25%

Off

Get Premium 350-501 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Wava
9 months ago
Wait, why not allow TCP too? Feels incomplete.
upvoted 0 times
...
Ronald
9 months ago
Definitely agree on port 3505, it's crucial.
upvoted 0 times
...
Leonardo
10 months ago
Not sure about only allowing UDP, seems risky.
upvoted 0 times
...
Katina
10 months ago
I think ICMP is a must for troubleshooting.
upvoted 0 times
...
Rory
10 months ago
Gotta allow port 3505 for MPLS OAM!
upvoted 0 times
...
Lashaun
10 months ago
I vaguely remember that allowing only UDP could be a secure approach, but I’m not confident about excluding other protocols completely.
upvoted 0 times
...
Daren
11 months ago
I practiced a similar question where we had to limit protocols for security. I feel like TCP and UDP might be too broad for this scenario.
upvoted 0 times
...
Jean
11 months ago
I think allowing ICMP could be a good option since it helps with troubleshooting, but I can't recall if it's the best choice here.
upvoted 0 times
...
Haydee
11 months ago
I remember we discussed the importance of allowing specific ports for OAM, but I'm not sure if it's 3505 or 3503.
upvoted 0 times
...
Brendan
11 months ago
I'm a little confused by the wording of the question. I'll need to carefully read through the options and consider the security implications of each one.
upvoted 0 times
...
Angelica
11 months ago
I'm confident I can solve this. Allowing port 3505 outbound and the TCP/UDP protocols are the best choices to ensure the new solution is secure.
upvoted 0 times
...
Edwin
11 months ago
Okay, let's think this through. Allowing port 3505 outbound and the ICMP protocol seem like the most secure options to me.
upvoted 0 times
...
Karan
11 months ago
Hmm, I'm a bit unsure about this one. I'll need to review the MPLS OAM and CoPP concepts to make sure I understand the context properly.
upvoted 0 times
...
Mabelle
11 months ago
This question seems straightforward. I'll need to carefully analyze the options to determine the two most secure actions.
upvoted 0 times
...
Bettina
1 year ago
I'm leaning towards A and E. Restricting the specific ports used by MPLS OAM and allowing direction-specific access seems like a good way to secure the solution.
upvoted 0 times
...
Janey
1 year ago
Haha, I bet the architect is regretting not using port 42069 in the configuration. That would have been the ultimate security move!
upvoted 0 times
Alexia
1 year ago
User 3: B) Allow the ICMP protocol only.
upvoted 0 times
...
Odette
1 year ago
User 2: A) Allow port 3505 in the outbound direction only.
upvoted 0 times
...
Catrice
1 year ago
User 1: Haha, I bet the architect is regretting not using port 42069 in the configuration. That would have been the ultimate security move!
upvoted 0 times
...
...
Marshall
1 year ago
I'm not so sure about that. Allowing only ICMP or UDP might not be enough. We should also consider allowing the TCP protocol, since some MPLS OAM tools might use it as well.
upvoted 0 times
Josphine
1 year ago
User 2: Yeah, that makes sense. Let's revise the CoPP policies to allow TCP along with ICMP and UDP.
upvoted 0 times
...
Dalene
1 year ago
User 1: I think we should allow the TCP protocol as well.
upvoted 0 times
...
...
Delmy
1 year ago
I think we should also allow the UDP protocol only. It can help in ensuring security for the new solution.
upvoted 0 times
...
Francesco
1 year ago
Hmm, I think B and D are the correct answers. MPLS OAM uses ICMP and UDP, so we need to allow those protocols for the new solution to be secure.
upvoted 0 times
Noe
1 year ago
User4: Agreed, allowing only ICMP and UDP will ensure security.
upvoted 0 times
...
Aileen
1 year ago
User3: So we need to allow those protocols for the new solution to be secure.
upvoted 0 times
...
Edwin
1 year ago
User2: Yes, MPLS OAM uses ICMP and UDP.
upvoted 0 times
...
Merilyn
1 year ago
User1: I think B and D are the correct answers.
upvoted 0 times
...
...
Precious
1 year ago
I agree with Dominque. Allowing specific ports in a specific direction can help secure the network.
upvoted 0 times
...
Dominque
1 year ago
I think we should allow port 3505 in the outbound direction only.
upvoted 0 times
...

Save Cancel