mediumMultiple Choice
300-410 Practice Question: Runs the following command to troubleshoot…
A network engineer runs the following command to troubleshoot Control Plane Policing (CoPP):
R1# show policy-map control-plane input class class-default
Class-map: class-default (match-any) 140091 packets, 12345678 bytes 5 minute offered rate 1000 bps, drop rate 0 bps Match: any police: cir 8000 bps, bc 1500 bytes conformed 140091 packets, 12345678 bytes; actions: transmit exceeded 0 packets, 0 bytes; actions: drop violated 0 packets, 0 bytes; actions: drop
What does this output indicate?
⚠ Common exam trap
Cisco often tests the misconception that a police statement with a CIR automatically means packets are being dropped, but the actual drop counters must be checked to confirm drops are occurring.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
CoPP is rate-limiting traffic to 8000 bps and not dropping any packets.
The output shows that the class-default policy-map for control-plane input has a police statement with a CIR of 8000 bps. The counters indicate 140,091 packets conformed and transmitted, with zero packets exceeded or violated. Since the drop rate is 0 bps and no packets have been dropped, CoPP is rate-limiting traffic to 8000 bps without any drops occurring.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
CoPP is dropping all traffic to the control plane.
Why it's wrong here
The counters show 140091 packets conformed and transmitted, with zero exceeded and zero violated, so no drops occurred. CoPP is dropping all control-plane traffic only when exceeded or violated counters rise and conformed stays flat, indicating the policer rate is too low.
- ✓
CoPP is rate-limiting traffic to 8000 bps and not dropping any packets.
Why this is correct
The police statement shows a committed information rate of 8000 bps with zero exceeded and zero violated packets, meaning all 140091 packets conformed and were transmitted. CoPP is rate-limiting to 8000 bps without dropping traffic.
- ✗
CoPP is not configured; the class-default shows no action.
Why it's wrong here
The class-default entry shows an active police action with cir 8000 bps and bc 1500 bytes, and 140,091 packets conformed and transmitted, so CoPP is configured and enforcing. class-default matches any traffic not caught by a more specific class, so it always appears in the policy output.
- ✗
CoPP is dropping packets due to exceeding the rate.
Why it's wrong here
Both the exceeded and violated counters read zero packets, and the drop rate is 0 bps, so no policing drops have occurred; all traffic conformed within the 8000 bps CIR. Exceeded drops would appear only once offered rate surpassed the configured committed rate.
Go deeper
Related to this question
About these practice questions
One of 1,401 original 300-410 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 300-410 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 300-410 exam.