mediumMultiple SelectObjective-mapped
350-401 Control Plane Policing (CoPP) Practice Question
Which three statements about Control Plane Policing (CoPP) are true? (Choose three.)
⚠ Common exam trap
CoPP is applied to traffic destined to the control plane, not to transit traffic. The configuration is under the 'control-plane' configuration mode.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
CoPP applies QoS policy-map logic to traffic that is destined to the control plane of the router.
Control Plane Policing (CoPP) protects the router's control plane by applying QoS policies to traffic destined to the router itself. It is configured under the 'control-plane' global configuration mode using class-maps and policy-maps. Option C is correct: CoPP can apply to both IPv4 and IPv6 traffic in a single policy-map by using multiple class-maps (one for each protocol). Option D describes data-plane ACLs, not CoPP. Option E is wrong because the default action of CoPP is to drop unmatched traffic, not permit.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
CoPP applies QoS policy-map logic to traffic that is destined to the control plane of the router.
Why this is correct
Correct because CoPP uses QoS policy-maps to police traffic destined to the control plane.
- ✓
CoPP is configured under the 'control-plane' global configuration mode.
Why this is correct
Correct because CoPP is configured in the 'control-plane' configuration mode.
- ✓
CoPP can be applied to both IPv4 and IPv6 traffic in a single policy-map.
Why this is correct
Correct. CoPP allows a single policy-map to include multiple class-maps for different protocols, including both IPv4 and IPv6.
- ✗
CoPP is applied to traffic transiting the router, not to traffic originated by the router.
Why it's wrong here
Incorrect because CoPP applies to traffic destined to the router, not transiting traffic.
- ✗
The default action for CoPP is to permit all control-plane traffic.
Why it's wrong here
Incorrect because the default action for CoPP is to drop unmatched traffic, not permit.
Go deeper
Related to this question
Learn chapter
VLANs and Spanning Tree Protocol Concepts
Key term
Control Plane Policing
Control Plane Policing is a Cisco security feature that protects a router or switch by rate-limiting the traffic that the device's processor must handle, preventing it from being overwhelmed.
Key term
Control Plane Protection
Control Plane Protection (CoPP) is a security feature on Cisco routers and switches that filters traffic destined to the device's control plane to prevent attacks and ensure stability.
About these practice questions
Courseiva writes every 350-401 question from scratch — 1,175 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 350-401 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-401 exam.