Which two security techniques are important to implement a secured management network that is used to access the management plane of a Cisco ARC cluster? (Choose two.)
Which two security techniques are important to implement a secured management network that is used to access the management plane of a Cisco ARC cluster? (Choose two.)
A . MPP
B . NAT
C . ip filter
D . ACLs
E . route maps
Answer: AD
Explanation:
The Management Plane Protection (MPP) feature in Cisco IOS software provides the capability to restrict the interfaces on which network management packets are allowed to enter a device. The MPP feature allows a network operator to designate one or more router interfaces as management interfaces. Device management traffic is permitted to enter a device only through these management interfaces. After MPP is enabled, no interfaces except designated management interfaces will accept network management traffic destined to the device.
Restricting management packets to designated interfaces provides greater control over management of a device, providing more security for that device. Other benefits include improved performance for data packets on nonmanagement interfaces, support for network scalability, need for fewer access control lists (ACLs) to restrict access to a device, and management packet floods on switching and routing interfaces are prevented from reaching the CPU.