mediumMultiple SelectObjective-mapped
300-410 Practice Question: Which TWO commands are used to troubleshoot…
Which TWO commands are used to troubleshoot Control Plane Policing (CoPP) and identify which traffic is being dropped? (Choose TWO.)
⚠ Common exam trap
Cisco often tests the distinction between commands that show CoPP configuration versus those that show actual drop statistics; the trap here is that candidates might think 'show access-lists' is sufficient because ACLs are used in class maps, but it does not show the policy-map actions or control-plane-specific drop counters.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
show policy-map control-plane
The 'show policy-map control-plane' command displays the applied policy map on the control plane, including class maps, match criteria, and per-class statistics such as the number of packets matched and dropped. This allows you to verify which traffic is being classified and confirm that CoPP is dropping the intended packets. It is the primary verification command for CoPP.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
show policy-map control-plane
Why this is correct
This command displays packet counters for each class in the CoPP policy, including dropped (violate) packets.
- ✗
debug policy-map control-plane
Why it's wrong here
This is not a valid Cisco IOS command; the correct debug is 'debug policy-map' but it is not specific to control plane and can be disruptive.
- ✓
show control-plane host open-ports
Why this is correct
This command shows which class map is associated with each open control plane port, helping verify CoPP classification.
- ✗
show ip cache flow
Why it's wrong here
This command displays NetFlow statistics for data plane traffic, not control plane policing drops.
- ✗
show access-lists
Why it's wrong here
This command shows ACL match counts but does not provide CoPP-specific drop information or policy statistics.
Go deeper
Related to this question
About these practice questions
This 300-410 question is part of Courseiva's 1,966-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 300-410 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 300-410 exam.