Refer to the exhibit. An engineer must protect the CPU of the router from high rates of NTP, SNMP, and SSH traffic. Which two configurations must be applied to drop these types of traffic when it continuously exceeds 320 kbps? (Choose two.)
A.
R1(config-pmap)#class CLASS-CoPP-Management R1(config-pmap-c)#police 32 conform-action transmit exceed-action drop violate-action transmit
B.
R1(config)#policy-map POLICY-CoPP R1(config-pmap)#class CLASS-CoPP-Management R1(config-pmap-c)#police 320000 conform-action transmit exceed-action drop violate-action drop
C.
R1(config)#policy-map POLICY-CoPP R1(config-pmap)#class CLASS-CoPP-Management R1(config-pmap-c)#police 320000 conform-action transmit exceed-action transmit violate-action drop
D.
R1(config)#control-plane R1(config-cp)# service-policy output POLICY-CoPP
E.
R1(config)#control-plane R1(config-cp)# service-policy input POLICY-CoPP
https://www.cisco.com/c/en/us/td/docs/ios/12_2sb/feature/guide/cpp.html
exceed-action action: Specifies the action to take on packets that exceed the rate limit
violate-action action: Specifies the action to take on packets that continuously exceed the police rate limit.
"continuously exceeds" -> Hence, option C,E.
R1(config)#policy-map POLICY-CoPP
R1(config-pmap)#class CLASS-CoPP-Management
R1(config-pmap-c)#police 320000 conform-action transmit exceed-action transmit violate-action drop
E.
R1(config)#control-plane
R1(config-cp)# service-policy input POLICY-CoPP
One thing to take in mind , this is only half right.
We here difine only CIR no PIR (Peak information rate), without PIR our violate-action drop means nothing.
Command should look like this
police 320000(CIR) 640000(PIR) conform-action transmit exceed-action transmit violate-action drop
CIR= Committed Information Rate , PIR =Peak information Rate . This is what policing does , ensues speed under <CIR is guaranteed , values <PIR (sometimes transmit, short period) Values over PIR DROP .
With B.:
When the traffic rate is below 320 Kbps the conform-action is to transmit the packet, when it exceeds 128 Kbps we will drop the packet.
violate-action specifies the action to take on packets that violate the normal and maximum burst sizes (default normal burst size is 1500 bytes; maximum burst size in bytes depends on the platform) >> in our case drop for B and C. >>> It's not asking for bursts it's asking for continious....
not sure but CE my choise;
cisco(config-pmap-c)#police 320000 conform-action transmit exceed-action tra
cisco(config-pmap-c)#$00 conform-action transmit exceed-action transmit ?
violate-action action when rate is greater than conform + exceed burst
<cr>
cisco(config-pmap-c)#$00 conform-action transmit exceed-action transmit v
cisco(config-pmap-c)#$-action transmit exceed-action transmit violate-action ?
drop drop packet
The question only refers to a conform CIR of 320Kbps, no PIR is mentioned so are you just assuming this is a dual bucket?
upvoted 2 times
...
...
This section is not available anymore. Please use the main Exam Page.350-401 Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
HungarianDish_111
Highly Voted 2 years, 3 months agonet_eng10021
1 year, 11 months ago[Removed]
11 months, 2 weeks agodragonwise
Highly Voted 2 years, 1 month agomatass_md
Most Recent 2 months, 2 weeks agoSebaDiaz
8 months, 2 weeks ago[Removed]
11 months agoHaidary
1 year, 7 months agorami_mma
2 years, 1 month agoRose66
2 years, 3 months agonushadu
2 years, 4 months agoHuntkey
2 years, 5 months agotestcom680
2 years, 5 months agoYoussefmetry
2 years, 5 months agoDeu_Inder
2 years, 8 months agobendarkel
2 years, 2 months agojj970us
2 years, 8 months agoAlberht
2 years, 7 months ago