Which two control plane policer design options should you consider to achieve high availability? (Choose two)

Factoring in protocol overhead is an operational tuning consideration for avoiding false drops, not a fundamental HA design principle for CoPP architecture.

Control plane policers are necessary on all network devices, not just externally facing ones, because internal misconfigured or compromised hosts can generate control plane floods just as damaging as external attacks.

NMS false alarms caused by overly aggressive CoPP policies are an operational side effect of misconfiguration, not a design option for achieving high availability.

CoPP enforced in hardware ensures that volumetric or malicious traffic targeting the CPU is rate-limited at the ASIC level before it can overwhelm the routing and signaling software processes. Hardware enforcement is a critical HA design requirement because a software-only policer could itself be saturated before it can act, defeating its purpose.

Control plane policers must be evaluated before the forwarding decision so that traffic destined for the CPU is intercepted and rate-limited at the earliest possible point in the packet processing pipeline, protecting protocol adjacencies and management plane stability.