mediumMultiple Choice
300-410 Practice Question: Runs the following command to troubleshoot a…
A network engineer runs the following command to troubleshoot a Network Logging and Syslog issue:
R1# show policy-map control-plane input class class-default
Output: Class-map: class-default (match-any) 0 packets, 0 bytes 5 minute offered rate 0 bps, drop rate 0 bps Match: any police: cir 1000000 bps, bc 31250 bytes conformed 0 packets, 0 bytes; actions: transmit exceeded 0 packets, 0 bytes; actions: drop violated 0 packets, 0 bytes; actions: drop
What does this output indicate?
⚠ Common exam trap
300-410 often tests whether candidates read counters correctly — the trap is assuming 'drop' actions mean traffic is being dropped, when zero counters prove nothing is matched.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The CoPP policy is policing control plane traffic at 1 Mbps, but no packets have been matched yet.
The output shows a CoPP (Control Plane Policing) policy applied to the control plane input, policing at 1,000,000 bps (1 Mbps) with a 31,250-byte burst, and all counters (conformed, exceeded, violated) are zero with '0 packets, 0 bytes' matched. This means the policy is active and configured, but no control plane traffic has matched it yet.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
The CoPP policy is policing control plane traffic at 1 Mbps, but no packets have been matched yet.
Why this is correct
The police stanza shows a committed information rate of 1,000,000 bps with conformed, exceeded and violated counters all at zero packets and bytes, confirming the class-default CoPP policy is actively policing at 1 Mbps but has not yet matched any control plane traffic.
- ✗
The CoPP policy is dropping all control plane traffic.
Why it's wrong here
The counters show zero conformed, exceeded and violated packets, so nothing is being dropped; the policy is simply idle. It tempts because the exceeded and violated actions are both drop, but those counters only increment once traffic actually breaches the cir of 1000000 bps.
- ✗
The CoPP policy is not applied to the control plane.
Why it's wrong here
The command output itself proves the policy is attached to the control plane, since 'show policy-map control-plane input' only returns data for an applied service policy. It tempts when no counters increment, but zero packets reflects idle traffic, not a missing attachment.
- ✗
The CoPP policy is using a class-map that matches all traffic.
Why it's wrong here
Matching all traffic is exactly what class-default does, and the output confirms it with 'Match: any' — this is a true statement, not the indication sought. It tempts because class-default is the catch-all class, but the question asks what the zero counters indicate.
Go deeper
Related to this question
About these practice questions
This 300-410 question is part of Courseiva's 1,401-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Cisco exam blueprint
This 300-410 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 300-410 exam.