exam questions

Exam 300-410 All Questions

View all questions & answers for the 300-410 exam

Exam 300-410 topic 1 question 163 discussion

Actual exam question from Cisco's 300-410
Question #: 163
Topic #: 1
[All 300-410 Questions]

The network administrator configured CoPP so that all HTTP and HTTPS traffic from the administrator device located at 172.16 1.99 toward the router CPU is limited to 500 kbps. Any traffic that exceeds this limit must be dropped. access-list 100 permit ip host 172.16.1.99 any
!
class-map CM-ADMIN
match access-group 100
!
policy-map PM-COPP
class CM-ADMIN
police 500000 conform-action transmit
!
interface E0/0
service-policy input PM-COPP
CoPP failed to capture the desired traffic and the CPU load is getting higher.
Which two configurations resolve the issue? (Choose two.)

  • A. interface E0/0 no service-policy input PM-COPP ! control-plane service-policy input PM-COPP
  • B. policy-map PM-COPP class CM-ADMIN no police 500000 conform-action transmit police 500 conform-action transmit ! control-plane service-policy input PM-COPP
  • C. no access-list 100 access-list 100 permit tcp host 172.16.1.99 any eq 80
  • D. no access-list 100 access-list 100 permit tcp host 172.16.1.99 any eq 80 access-list 100 permit tcp host 172.16.1.99 any eq 443
  • E. policy-map PM-COPP class CM-ADMIN no police 500000 conform-action transmit police 500 conform-action transmit
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
deech
1 month, 2 weeks ago
Selected Answer: A
A & D are correct
upvoted 1 times
...
[Removed]
9 months, 3 weeks ago
Selected Answer: A
A & D are correct i hate this website
upvoted 4 times
...
Pietjeplukgeluk
10 months ago
Selected Answer: A
A seems OK, but D seems fully wrong as command == bits per second, so 500 is wrong. Require 500 kilobits per second it should police at a 500.000 cir. so i do not see any correct answer in D. Furthermore, the ACL is wrong as the destination of packets destined at the router will always have the router in the destination and not the source. Again, really bad question.
upvoted 1 times
bk989
8 months, 2 weeks ago
Read the question again. The source is 172.16.1.99
upvoted 2 times
...
bk989
8 months, 2 weeks ago
The question is fine and A and D are the answers. We apply copp to input control plane. Applying it to an interface means COPP analyzes all traffic going through the router. Applying to control plane means COPP ananlyzes packets going to CPU. A is correct. For D: "from the administrator device located at 172.16 1.99 toward the router CPU" The ACL in D is from the source 172.16.1.99 for port 80 and port 443. D is fine.
upvoted 2 times
...
...
Coffee_bean_master
11 months, 2 weeks ago
Side note: Other traffic that may be important will get dropped if not allowed through the ACL 100. This is to include control plane traffic that is important to the router. I choose A and D for the answers.
upvoted 2 times
Coffee_bean_master
11 months, 2 weeks ago
If CoPP is changed from the interface to the CPU, then other important traffic will need to be allowed through as well or else get dropped. (BGP, EIGRP, SNMP, etc.)
upvoted 1 times
...
...
Gramterre
1 year, 1 month ago
Selected Answer: A
A&D choose two please fix
upvoted 2 times
...
tubirubs
1 year, 2 months ago
Selected Answer: A
Choose two, A&D
upvoted 2 times
...
SAMAKEMM
1 year, 6 months ago
Correct answer: A & D
upvoted 2 times
...
[Removed]
1 year, 9 months ago
Selected Answer: D
Choose two, A&D, configure the Control Plane to reference the Policy Map inbound. and the access list needs to reference por 80 and 443 for HTTP and HTTPS respectively.
upvoted 4 times
...
inteldarvid
1 year, 9 months ago
Selected Answer: D
are two option: A and D
upvoted 1 times
...
Dacusai
1 year, 12 months ago
A&D, question says choose 2. But to restrict traffic to 500 kb we need to add the exceed-action drop command in order to do real control
upvoted 2 times
...
forccnp
2 years, 2 months ago
Selected Answer: D
A&D are correct answers
upvoted 1 times
...
Xerath
2 years, 2 months ago
The answer is: A & D.
upvoted 1 times
...
rogabor81
2 years, 4 months ago
I would say A an D as well. but should not we add an exceed-action drop at the and as well? it says that any exceeding traffic should be dropped....
upvoted 4 times
HungarianDish_111
2 years ago
That seems to be missing, too. A+D, plus exceed-action drop.
upvoted 3 times
dapardo
1 year ago
Agree on this, it doesnt make sense to me without the drop action.
upvoted 1 times
...
Muste
1 year, 8 months ago
The default policing action if you only configured conformed-action is to drop the packets that exceed the configured rate limit.
upvoted 1 times
...
...
...
Noproblem22
2 years, 5 months ago
A D are correct answer
upvoted 2 times
...
ChillingAgain
2 years, 5 months ago
A and D are correct. Please correct the answers!
upvoted 1 times
...
xziomal9
2 years, 11 months ago
The correct answer is: A D
upvoted 2 times
...
Hack4
3 years ago
A AND D
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago