mediumMultiple ChoiceObjective-mapped
300-410 Practice Question: A router has a CoPP policy that includes a…
A router has a CoPP policy that includes a class-map matching all TCP traffic with a police rate of 5000 bps. The engineer notices that Telnet sessions to the router are timing out, but SSH sessions work fine. The router is configured to accept both Telnet and SSH. What is the most likely cause?
⚠ Common exam trap
Cisco often tests the concept that CoPP class-maps are processed in order, and a more specific class (e.g., matching Telnet) with a restrictive action can override a broader class (e.g., all TCP), causing candidates to incorrectly assume the general TCP rate limit is the sole cause.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The CoPP policy has a separate class for Telnet with a lower police rate or a drop action.
The CoPP policy likely includes a separate class-map that matches Telnet traffic (TCP port 23) and applies a police rate lower than 5000 bps or a drop action, causing Telnet sessions to time out. Since the existing class-map matches all TCP traffic with a 5000 bps police rate, and SSH (TCP port 22) works fine, the issue is not with the general TCP rate limit but with a more specific Telnet class that overrides or preempts the general TCP class. This is a common CoPP misconfiguration where a more specific class with a restrictive action is placed before a broader class in the policy-map.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
The CoPP policy has a separate class for Telnet with a lower police rate or a drop action.
Why this is correct
If Telnet is in a different class with a lower rate or drop, it would explain why Telnet fails while SSH works.
- ✗
The SSH traffic is encrypted, so it uses less bandwidth than Telnet.
Why it's wrong here
SSH encryption adds overhead, so SSH actually uses slightly more bandwidth than Telnet.
- ✗
The Telnet server on the router is not responding due to a configuration error.
Why it's wrong here
The scenario states both are configured, and the issue is related to CoPP.
- ✗
The CoPP policy is rate-limiting TCP traffic to 5000 bps, which is enough for SSH but not for Telnet.
Why it's wrong here
Both use TCP, and 5000 bps should be sufficient for interactive sessions; the difference is likely due to separate classes.
Go deeper
Related to this question
About these practice questions
Courseiva writes every 300-410 question from scratch — 1,966 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 300-410 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 300-410 exam.