nerdexam
Cisco

300-320 · Question #63

What is one reason to implement Control Plane Policing?

The correct answer is B. protect the network device route processor from getting overloaded by rate limiting the incoming. Control Plane Policing (CoPP) rate-limits traffic directed at the router's control plane to protect the route processor from being overwhelmed by excessive or malicious traffic.

Security Services

Question

What is one reason to implement Control Plane Policing?

Options

  • Aallow OSPF routing protocol to advertise routes
  • Bprotect the network device route processor from getting overloaded by rate limiting the incoming
  • Callow network devices to generate and receive packets
  • Dprotect the data plane packets

How the community answered

(28 responses)
  • A
    7% (2)
  • B
    89% (25)
  • C
    4% (1)

Why each option

Control Plane Policing (CoPP) rate-limits traffic directed at the router's control plane to protect the route processor from being overwhelmed by excessive or malicious traffic.

Aallow OSPF routing protocol to advertise routes

CoPP does not enable OSPF to advertise routes - OSPF functions independently; CoPP simply limits how many OSPF packets per second reach the CPU.

Bprotect the network device route processor from getting overloaded by rate limiting the incomingCorrect

CoPP uses Cisco MQC policies applied to the control plane to police the rate of packets punted to the route processor, preventing CPU exhaustion from DoS attacks, traffic floods, or misconfigured devices. By limiting the rate of specific traffic classes (OSPF, BGP, ICMP, etc.) destined for the CPU, the router remains able to process legitimate control traffic and maintain routing stability. Without CoPP, a traffic flood can starve the route processor and cause routing protocol failures.

Callow network devices to generate and receive packets

Network devices generate and receive packets regardless of CoPP - that is a fundamental function not governed by policing policy.

Dprotect the data plane packets

CoPP explicitly protects the control plane (CPU/route processor), not the data plane, which is handled by forwarding ASICs.

Concept tested: Control Plane Policing (CoPP) for CPU protection

Source: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/qos_copp/configuration/xe-16/qos-copp-xe-16-book/qos-copp.html

Topics

#CoPP#control plane policing#route processor protection#rate limiting

Community Discussion

No community discussion yet for this question.

Full 300-320 Practice