hardMultiple Choice
350-401 Practice Question: Runs the following command on Router R1: R1# show…
A network engineer runs the following command on Router R1:
R1# show policy-map control-plane
Control Plane
Service-policy input: CoPP-POLICY
Class-map: MGMT-CLASS (match-all) 100 packets, 5000 bytes 5 minute offered rate 1000 bps Match: access-group name MGMT-ACL police: cir 32000 bps, bc 4000 bytes, be 4000 bytes conformed 80 packets, 4000 bytes; actions: transmit exceeded 15 packets, 750 bytes; actions: drop violated 5 packets, 250 bytes; actions: drop
Class-map: class-default (match-any) 200 packets, 10000 bytes 5 minute offered rate 2000 bps Match: any police: cir 64000 bps, bc 8000 bytes, be 8000 bytes conformed 200 packets, 10000 bytes; actions: transmit exceeded 0 packets, 0 bytes; actions: drop violated 0 packets, 0 bytes; actions: drop
Based on this output, what can be concluded?
⚠ Common exam trap
Cisco often tests the distinction between 'input' and 'output' direction for CoPP, and the trap here is that candidates assume the policy is applied in the output direction or overlook the drop counters in the MGMT-CLASS, leading them to incorrectly select option B or C.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Management traffic to the control plane is being policed, and some packets are being dropped because they exceed the configured rate.
The output shows that the CoPP-POLICY policy map is applied to the control plane in the input direction. For the MGMT-CLASS class, the policer has a CIR of 32000 bps, and the counters show 15 packets exceeded and 5 packets violated, both with a drop action. This confirms that some management traffic is being dropped because it exceeds the configured rate, making option A correct.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Management traffic to the control plane is being policed, and some packets are being dropped because they exceed the configured rate.
Why this is correct
Management traffic matching MGMT-ACL is policed at 32 kbps, and the exceeded and violated counters confirm drops: 15 exceeded packets plus 5 violated packets were discarded rather than transmitted. This satisfies the stem's constraint that control-plane policing actively rate-limits management traffic, proving CoPP enforcement is operational on R1.
- ✗
All management traffic is being transmitted without drops.
Why it's wrong here
The MGMT-CLASS policer shows 15 packets exceeded and 5 violated, all dropped, so management traffic is not wholly transmitted. It tempts because conformed traffic does transmit, and class-default shows zero drops — but the question asks about the MGMT-CLASS counters specifically, where drops occurred.
- ✗
The policer is configured in the output direction.
Why it's wrong here
The service-policy is applied as input, shown by "Service-policy input: CoPP-POLICY", so an output-direction claim contradicts the output. Output policing is tempting because it also enforces rates, but it shapes traffic leaving an interface toward downstream devices, whereas control-plane policing must inspect traffic arriving at the route processor.
- ✗
The class-default is dropping packets.
Why it's wrong here
The class-default counters show zero exceeded and zero violated packets, so nothing is being dropped there; all 200 packets conformed and transmitted. It is tempting because class-default polices unmatched traffic and would drop under overload, but here only MGMT-CLASS records drops (15 exceeded, 5 violated).
Visual reference
Go deeper
Related to this question
About these practice questions
This 350-401 question is part of Courseiva's 1,923-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 350-401 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-401 exam.