nerdexam
Cisco

350-401 · Question #203

Refer to the exhibit. An engineer configures CoPP and enters the show command to verify the implementation. What is the result of the configuration?

The correct answer is A. All traffic will be policed based on access-list 120.. The Control Plane Policing (CoPP) configuration ensures that all control-plane traffic matching access-list 120 will be subjected to the defined policing actions.

Submitted by stefanr· Mar 6, 2026Wireless LAN Security

Question

Refer to the exhibit. An engineer configures CoPP and enters the show command to verify the implementation. What is the result of the configuration?

Exhibits

350-401 question #203 exhibit 1
350-401 question #203 exhibit 2

Options

  • AAll traffic will be policed based on access-list 120.
  • BIf traffic exceeds the specified rate, it will be transmitted and remarked.
  • CClass-default traffic will be dropped.
  • DICMP will be denied based on this configuration.

How the community answered

(30 responses)
  • A
    63% (19)
  • B
    7% (2)
  • C
    10% (3)
  • D
    20% (6)

Why each option

The Control Plane Policing (CoPP) configuration ensures that all control-plane traffic matching access-list 120 will be subjected to the defined policing actions.

AAll traffic will be policed based on access-list 120.Correct

Control Plane Policing (CoPP) policies are applied to the control plane of a network device, and traffic matching a specific access-list within a CoPP class-map will have the configured policing parameters (e.g., rate limits, drop actions) enforced upon it.

BIf traffic exceeds the specified rate, it will be transmitted and remarked.

While policing involves rate limiting, the specific action for traffic exceeding the rate depends on the policy's configuration, which can be 'drop' or 'transmit and remark', and is not universally 'transmit and remarked'.

CClass-default traffic will be dropped.

The action applied to 'class-default' traffic in a CoPP policy is explicitly defined within the policy and can vary (e.g., police, drop, or transmit), so it cannot be assumed that it will always be dropped.

DICMP will be denied based on this configuration.

ICMP traffic will only be denied if access-list 120 specifically blocks it, or if it falls into a class-map that has a drop action configured, which cannot be determined solely from the statement about policing based on ACL 120.

Concept tested: Cisco Control Plane Policing (CoPP)

Source: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_data_copp/configuration/xe-3s/sec-data-copp-xe-3s-book/sec-copp-policer.html

Topics

#CoPP#control plane policing#ACL#traffic rate limiting

Community Discussion

No community discussion yet for this question.

Full 350-401 Practice