350-401 Question #203: Real Exam Question with Answer & Explanation

Question

Refer to the exhibit. An engineer configures CoPP and enters the show command to verify the implementation. What is the result of the configuration?

Options

• AAll traffic will be policed based on access-list 120.
• BIf traffic exceeds the specified rate, it will be transmitted and remarked.
• CClass-default traffic will be dropped.
• DICMP will be denied based on this configuration.

Explanation

The Control Plane Policing (CoPP) configuration ensures that all control-plane traffic matching access-list 120 will be subjected to the defined policing actions.

Common mistakes.

• B. While policing involves rate limiting, the specific action for traffic exceeding the rate depends on the policy's configuration, which can be 'drop' or 'transmit and remark', and is not universally 'transmit and remarked'.
• C. The action applied to 'class-default' traffic in a CoPP policy is explicitly defined within the policy and can vary (e.g., police, drop, or transmit), so it cannot be assumed that it will always be dropped.
• D. ICMP traffic will only be denied if access-list 120 specifically blocks it, or if it falls into a class-map that has a drop action configured, which cannot be determined solely from the statement about policing based on ACL 120.

Concept tested. Cisco Control Plane Policing (CoPP)

Reference. https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_data_copp/configuration/xe-3s/sec-data-copp-xe-3s-book/sec-copp-policer.html

No community discussion yet for this question.