350-401 exam dumps

350-401 practice question 257 of 631

Implementing Cisco Enterprise Network Core Technologies. Professional level, Cisco. Free question with the correct answer and a full explanation.

350-401 Question 257

Single answer

An organization has been experiencing intermittent network outages due to high CPU utilization on their edge router caused by malicious traffic targeting the control plane. The network administrator decides to implement Control Plane Policing (CoPP) to protect the router. What is the primary objective of CoPP in this scenario?

  1. A

    To prevent all traffic from reaching the control plane

  2. B

    To limit and prioritize traffic destined for the control plane

  3. C

    To redirect traffic from the control plane to a secondary device for processing

  4. D

    To inspect and block all traffic originating from untrusted sources

Show answer and explanation

Correct answer: B

Explanation

Control Plane Policing (CoPP) is a QoS-based feature used to protect a router's control plane from excessive or malicious traffic. It allows administrators to define policies that limit and prioritize traffic destined for the control plane, ensuring critical protocol operations and management traffic are not disrupted during high traffic scenarios or attacks. This helps maintain the stability and performance of the router.

  • A. Incorrect.

    Incorrect: CoPP does not prevent all traffic from reaching the control plane. Instead, it allows critical traffic while filtering or rate-limiting unnecessary or malicious traffic.

  • B. Correct.

    Correct: CoPP is designed to limit and prioritize traffic destined for the control plane to ensure the router remains operational even during high traffic or attack scenarios.

  • C. Incorrect.

    Incorrect: CoPP does not redirect traffic to a secondary device. It enforces policies directly on the control plane.

  • D. Incorrect.

    Incorrect: While CoPP can block or limit certain traffic, its primary goal is not to block all traffic from untrusted sources, but to manage traffic efficiently and protect the router's resources.

Timed practice exam

Take a 350-401 practice test under exam conditions

75 questions in 120 minutes, drawn from this bank, with a score report and a per-question review when you finish.

Start timed exam