nerdexam
CiscoCisco

350-401 · Question #692

350-401 Question #692: Real Exam Question with Answer & Explanation

The correct answer is D: It applies to packets that are punted to the route processor.. Control Plane Policing (CoPP) Explained Why D is Correct: Control Plane Policing (CoPP) is specifically designed to protect the Route Processor (RP) by rate-limiting or filtering traffic that is punted (redirected) to it - such as routing protocol updates, management traffic, and

Submitted by jakub_pl· Mar 6, 2026Security

Question

Which statement about Control Plane Policing is true?

Options

  • AIt queues egress packets that would otherwise be discarde
  • BIt applies to packets that are generated locally.
  • CIt queues ingress packets that would otherwise be discarde
  • DIt applies to packets that are punted to the route processor.

Explanation

Control Plane Policing (CoPP) Explained

Why D is Correct: Control Plane Policing (CoPP) is specifically designed to protect the Route Processor (RP) by rate-limiting or filtering traffic that is punted (redirected) to it - such as routing protocol updates, management traffic, and exception packets. CoPP acts as a traffic cop for the control plane, ensuring the RP isn't overwhelmed by legitimate or malicious traffic.

Why the Distractors Are Wrong:

  • A & C are incorrect because CoPP does not queue packets - it polices (rate-limits or drops) them using a policy-map. Queuing is a QoS function, not a CoPP function.
  • B is incorrect because CoPP applies to traffic destined for the route processor (punted traffic), not to locally generated packets leaving the device (that would fall under other policy mechanisms).

Memory Tip: Think of CoPP as a bouncer protecting the RP's door - it only controls who gets punted up to the control plane. The key word to remember is "punted": any packet punted to the route processor is subject to CoPP policies. If you see "queuing" in an answer choice about CoPP, it's almost certainly wrong.

Topics

#Control Plane Policing#CoPP#Network Security#Router Protection

Community Discussion

No community discussion yet for this question.

Full 350-401 PracticeBrowse All 350-401 Questions