mediumMultiple Choice
300-410 Practice Question: Runs the following command on Router R1: R1# show…
A network engineer runs the following command on Router R1:
R1# show policy-map control-plane
Control Plane
Service-policy input: CoPP-IN
Class-map: CoPP-ICMP (match-all) 100 packets, 6000 bytes 5 minute offered rate 500 bps, drop rate 500 bps Match: access-group 100 police: cir 8000 bps, bc 1500 bytes, be 1500 bytes conformed 50 packets, 3000 bytes; actions: transmit exceeded 25 packets, 1500 bytes; actions: drop violated 25 packets, 1500 bytes; actions: drop
Based on this output, what is the most likely impact on the router?
⚠ Common exam trap
Candidates may misinterpret the 'conformed' counter as meaning all traffic is transmitted, but the exceeded and violated counters indicate actual drops. In this case, 50 packets were transmitted and 50 dropped, so the ICMP traffic is rate-limited, not completely blocked.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
ICMP traffic is being rate-limited, causing some ping requests to fail.
The output shows that ICMP traffic matching access-group 100 is being policed with a CIR of 8000 bps. Out of 100 packets, 50 were conformed (transmitted), 25 exceeded (dropped), and 25 violated (dropped). This results in a 50% packet loss, causing some ping requests to fail. The drop rate equals the offered rate (500 bps) because the policer is dropping half the traffic. Therefore, option B is correct.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
All ICMP packets are being transmitted without drops.
Why it's wrong here
The police counters show 25 packets exceeded and 25 violated, all dropped, so half the ICMP traffic is discarded rather than all transmitted. It tempts because conformed packets are transmitted, but the drop rate of 500 bps confirms active policing drops under this CIR.
- ✓
ICMP traffic is being rate-limited, causing some ping requests to fail.
Why this is correct
The police configuration caps ICMP at 8000 bps, and the output shows exceeded and violated packets being dropped rather than transmitted. Because conformed traffic alone is forwarded, excess ping requests are discarded, matching the rate-limiting impact described.
- ✗
The police rate is set to 16000 bps.
Why it's wrong here
The output states cir 8000 bps, so 16000 bps contradicts the configured committed rate. It is tempting because exceeded and violated counters each show 25 packets, inviting a doubling of the 8000 bps figure, and would be correct only if the policy-map actually specified that value.
- ✗
The class-default is matching ICMP traffic.
Why it's wrong here
The output shows class-map CoPP-ICMP matching access-group 100, not class-default; class-default only matches traffic not caught by any other class. It tempts because class-default exists in every policy-map, but it would only match ICMP if no explicit class matched that traffic.
Go deeper
Related to this question
About these practice questions
This 300-410 question is part of Courseiva's 1,401-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 300-410 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 300-410 exam.