Exam 300-410 All Questions

View all questions & answers for the 300-410 exam

Exam 300-410 topic 1 question 163 discussion

Actual exam question from Cisco's 300-410

Question #: 163
Topic #: 1

The network administrator configured CoPP so that all HTTP and HTTPS traffic from the administrator device located at 172.16 1.99 toward the router CPU is limited to 500 kbps. Any traffic that exceeds this limit must be dropped. access-list 100 permit ip host 172.16.1.99 any
!
class-map CM-ADMIN
match access-group 100
!
policy-map PM-COPP
class CM-ADMIN
police 500000 conform-action transmit
!
interface E0/0
service-policy input PM-COPP
CoPP failed to capture the desired traffic and the CPU load is getting higher.
Which two configurations resolve the issue? (Choose two.)

A. interface E0/0 no service-policy input PM-COPP ! control-plane service-policy input PM-COPP
B. policy-map PM-COPP class CM-ADMIN no police 500000 conform-action transmit police 500 conform-action transmit ! control-plane service-policy input PM-COPP
C. no access-list 100 access-list 100 permit tcp host 172.16.1.99 any eq 80
D. no access-list 100 access-list 100 permit tcp host 172.16.1.99 any eq 80 access-list 100 permit tcp host 172.16.1.99 any eq 443
E. policy-map PM-COPP class CM-ADMIN no police 500000 conform-action transmit police 500 conform-action transmit

Show Suggested Answer

Suggested Answer: A 🗳️

by piojo at April 30, 2022, 8:41 p.m.

Comments

Submit Cancel

[Removed]

Highly Voted 11 months, 1 week ago

Selected Answer: A

A & D are correct i hate this website

upvoted 5 times

...

deech

Most Recent 3 months ago

Selected Answer: A

A & D are correct

upvoted 2 times

...

Pietjeplukgeluk

11 months, 2 weeks ago

Selected Answer: A

A seems OK, but D seems fully wrong as command == bits per second, so 500 is wrong. Require 500 kilobits per second it should police at a 500.000 cir. so i do not see any correct answer in D. Furthermore, the ACL is wrong as the destination of packets destined at the router will always have the router in the destination and not the source. Again, really bad question.

upvoted 1 times

bk989

10 months ago

Read the question again. The source is 172.16.1.99

upvoted 2 times

...

bk989

10 months ago

The question is fine and A and D are the answers. We apply copp to input control plane. Applying it to an interface means COPP analyzes all traffic going through the router. Applying to control plane means COPP ananlyzes packets going to CPU. A is correct. For D: "from the administrator device located at 172.16 1.99 toward the router CPU" The ACL in D is from the source 172.16.1.99 for port 80 and port 443. D is fine.

upvoted 2 times

...

Coffee_bean_master

1 year ago

Side note: Other traffic that may be important will get dropped if not allowed through the ACL 100. This is to include control plane traffic that is important to the router. I choose A and D for the answers.

upvoted 2 times

Coffee_bean_master

1 year ago

If CoPP is changed from the interface to the CPU, then other important traffic will need to be allowed through as well or else get dropped. (BGP, EIGRP, SNMP, etc.)

upvoted 1 times

...

Gramterre

1 year, 2 months ago

Selected Answer: A

A&D choose two please fix

upvoted 2 times

...

tubirubs

1 year, 3 months ago

Selected Answer: A

Choose two, A&D

upvoted 2 times

...

SAMAKEMM

1 year, 8 months ago

Correct answer: A & D

upvoted 2 times

...

[Removed]

1 year, 11 months ago

Selected Answer: D

Choose two, A&D, configure the Control Plane to reference the Policy Map inbound. and the access list needs to reference por 80 and 443 for HTTP and HTTPS respectively.

upvoted 4 times

...