Which two statements are true about control plane policing? (Choose two.)

CoPP is specifically designed to protect the router's control plane (the route processor) from malicious or excessive traffic by inspecting and acting on packets that are *destined to the router itself*, rather than transit traffic.

When configuring access lists for CoPP policies, using the `log` keyword can cause the route processor to generate a large number of log messages for every matched packet, potentially consuming excessive CPU resources and defeating the purpose of CoPP.

In Modular QoS CLI (MQC) policies, a `deny` rule in an access list *does* cause the packet to proceed to the next class-map in the policy, continuing evaluation, unless an explicit action (like drop) is taken within that class.

The `log` keyword should generally *not* be used in ACLs applied for control plane policing due to the potential for excessive logging and CPU strain, contrary to the statement that it *can* be used.