Courseiva
hardMultiple ChoiceObjective-mapped

300-410 Practice Question: Runs the following command on Router R1: R1# show…

A network engineer runs the following command on Router R1:

R1# show policy-map control-plane

Control Plane

Service-policy input: CoPP-IN

Class-map: CoPP-BGP (match-all) 0 packets, 0 bytes 5 minute offered rate 0000 bps, drop rate 0000 bps Match: access-group 120 police: cir 32000 bps, bc 6000 bytes, be 6000 bytes conformed 0 packets, 0 bytes; actions: transmit exceeded 0 packets, 0 bytes; actions: drop violated 0 packets, 0 bytes; actions: drop

R1# show ip bgp summary

BGP router identifier 1.1.1.1, local AS number 100 BGP table version is 1, main routing table version 1

Neighbor        V           AS MsgRcvd MsgSent   TblVer  InQ OutQ Up/Down  State/PfxRcd
10.1.1.2        4          200      10      10        1    0    0 00:05:00        5

Based on this output, what is the most likely problem?

⚠ Common exam trap

Cisco often tests the misconception that a zero packet count under a CoPP class implies the policer is dropping all traffic, when in fact it indicates the classification is failing and traffic is not being evaluated by that policy.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

The access-list 120 is not matching BGP traffic, so it is falling into class-default.

The CoPP policy shows zero packets matched under class CoPP-BGP, which uses access-group 120. Since the BGP session to 10.1.1.2 is up and exchanging routes, BGP traffic is not being classified by the policy and is instead falling into the default class, which typically permits all traffic. This indicates that access-list 120 does not match the BGP packets, likely due to incorrect ACL entries or direction.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • The BGP session is down.

    Why it's wrong here

    The BGP summary shows the neighbor is up with state established.

  • The access-list 120 is not matching BGP traffic, so it is falling into class-default.

    Why this is correct

    The zero packet count indicates the class is not matching, but BGP is working, so traffic is matched by class-default.

  • The police rate is too low and is dropping all BGP packets.

    Why it's wrong here

    The counters show 0 packets, so no packets have been classified.

  • The policy-map is applied to the output direction.

    Why it's wrong here

    The output shows input direction.

Visual reference

Source Router + ACL permit 10.0.0.0/8 deny any Server 10.0.0.5 ✓ 192.168.1.1 ✗ dropped ACLs evaluate top-down; first match wins — implicit deny all at end

About these practice questions

This 300-410 question is part of Courseiva's 1,966-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This 300-410 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 300-410 exam.