Question 1,777 of 1,958
mediumMultiple ChoiceObjective-mapped
350-401 Practice Question: Is troubleshooting an issue where a Cisco router…
A network engineer is troubleshooting an issue where a Cisco router is not responding to SNMP polls from a network management station (NMS) at 192.168.1.50. The router has a CoPP policy that includes a class-map matching SNMP traffic (UDP port 161). The engineer checks the CoPP statistics and sees that SNMP packets from the NMS are being dropped. The engineer wants to allow SNMP from the NMS while still protecting the control plane. Which configuration change should the engineer make?
⚠ Common exam trap
Cisco often tests the concept that CoPP ACLs are processed in order, and candidates may incorrectly assume that increasing the police rate or removing the policy entirely is the solution, rather than understanding that a specific permit entry for the trusted host must be placed before the deny statement.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Modify the CoPP ACL to include a permit statement for UDP port 161 from host 192.168.1.50 before the deny statement.
The CoPP policy is dropping SNMP packets from the NMS because the class-map matching SNMP traffic (UDP port 161) is applied without an exception for the specific management station. By modifying the ACL to include a permit statement for UDP port 161 from host 192.168.1.50 before the deny statement, the router will match and allow those packets before they hit the drop action, preserving control plane protection while permitting the NMS polls.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Modify the CoPP ACL to include a permit statement for UDP port 161 from host 192.168.1.50 before the deny statement.
Why this is correct
Correct because this allows SNMP traffic from the NMS to be classified and permitted by the CoPP policy.
- ✗
Increase the police rate for the CoPP class that matches SNMP traffic.
Why it's wrong here
Increasing the police rate would allow more SNMP traffic in total, but the problem is that packets from the NMS are being dropped specifically, not that the overall rate is too low. This option is tempting because raising the police rate is a standard way to reduce drops when a class-map is rate-limiting legitimate traffic, and it would be correct if the router were dropping all SNMP packets due to exceeding a configured bandwidth limit. However, the stem indicates selective dropping of only the NMS’s traffic, which requires an ACL-based permit within the class-map, not a rate adjustment.
- ✗
Remove the CoPP policy from the control plane and rely on interface ACLs.
Why it's wrong here
Incorrect because removing CoPP leaves the control plane vulnerable.
- ✗
Change the SNMP port on the router to a non-standard port to avoid the CoPP policy.
Why it's wrong here
Incorrect because this would require changes on the NMS and may not resolve the issue if the CoPP policy is not updated.
Visual reference
About these practice questions
Courseiva creates original exam-style practice questions with explanations and wrong-answer analysis. It does not publish real exam questions, exam dumps, or protected exam content. Learn why practice questions differ from exam dumps →
Last reviewed: Jul 4, 2026
This 350-401 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-401 exam.
Question Discussion
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
Sign in to join the discussion.