mediumMultiple ChoiceObjective-mapped
300-410 Practice Question: Consider the following CoPP configuration:…
Consider the following CoPP configuration:
class-map match-any COPP-ROUTING match protocol ospf match protocol eigrp match protocol bgp ! policy-map COPP-POLICY
class COPP-ROUTING
police 32000 conform-action transmit exceed-action drop
class class-default
police 64000 conform-action transmit exceed-action drop ! control-plane service-policy input COPP-POLICY
What is a potential issue with this configuration?
⚠ Common exam trap
Cisco often tests the misconception that 'match protocol' can be used in CoPP class-maps because it is valid in data-plane QoS policies, but CoPP explicitly requires ACLs, DSCP, or IP precedence for classification.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The 'match protocol' command is not supported in CoPP class-maps; only ACLs or DSCP/IP precedence can be used.
The 'match protocol' command is not supported in Control Plane Policing (CoPP) class-maps. CoPP operates on the control plane, which processes packets that are destined to the router itself; these packets are typically identified by ACLs, DSCP, or IP precedence values, not by protocol names like OSPF, EIGRP, or BGP. The 'match protocol' command is used in QoS policies applied to data-plane interfaces, not in control-plane service policies.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The class-map uses match-any instead of match-all, which will cause incorrect matching.
Why it's wrong here
Incorrect. Both match-any and match-all are valid; match-any is actually appropriate here if multiple protocols should be matched individually.
- ✗
The police rate of 32000 bps is too low for routing protocol traffic and may cause adjacency drops.
Why it's wrong here
Incorrect. While the rate might be low, the primary issue is the use of match protocol.
- ✓
The 'match protocol' command is not supported in CoPP class-maps; only ACLs or DSCP/IP precedence can be used.
Why this is correct
Correct. CoPP only supports match access-group, match ip dscp, or match ip precedence. match protocol is not allowed.
- ✗
The policy-map must be applied to the control-plane with the 'output' keyword instead of 'input'.
Why it's wrong here
Incorrect. CoPP can be applied as input or output; input is correct for policing incoming control-plane traffic.
Visual reference
Quick reference
Routing Protocol Comparison
| Protocol | Metric | Max Hops | Algorithm | Type |
|---|---|---|---|---|
| RIP v2 | Hop count | 15 | Bellman-Ford | Distance vector |
| OSPF | Cost (bandwidth) | Unlimited | Dijkstra (SPF) | Link state |
| EIGRP | Composite metric | Unlimited | DUAL | Hybrid |
| IS-IS | Cost | Unlimited | Dijkstra | Link state |
| BGP | Policy / attributes | Unlimited | Path vector | Path vector |
RIP's 15-hop limit makes it unsuitable for large networks. OSPF and EIGRP dominate modern enterprise deployments.
Go deeper
Related to this question
About these practice questions
Courseiva writes every 300-410 question from scratch — 1,966 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 300-410 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 300-410 exam.