What is the primary purpose of Control Plane Policing (CoPP)?

To filter traffic between VLANs on a switch

To encrypt control plane traffic between routers

To provide redundancy for routing protocols

To protect the control plane from excessive or malicious traffic

After defining a class map and policy map for CoPP, which command applies the policy to the control plane?

service-policy input COPP-POLICY

What is the order of processing for entries in an access control list?

Entries are processed sequentially from top to bottom, and the first match is applied

All entries are evaluated and the most specific match is applied

Entries are processed from bottom to top

Entries are processed in random order

A network engineer is configuring ACLs on a router that connects the corporate LAN (10.10.0.0/16) to the internet. The goal is to prevent external hosts from initiating connections into the LAN while still allowing internal users to browse the web. The engineer applies an ACL to the router's WAN interface. Which ACL configuration and direction best achieves this objective?

Extended ACL permitting HTTP and HTTPS inbound on the WAN interface

Extended ACL denying all inbound traffic on the WAN interface

Standard ACL permitting only the LAN subnet outbound on the WAN interface

Extended ACL permitting established TCP connections inbound on the WAN interface, with a permit statement for returning web traffic

CiscoCertified Network Professional Enterprise

Domain 5Objective 2

5.2 Configure and Verify Infrastructure Security Features 350-401 Practice Questions (Page 2)

Part of the 5.0 Security domain, which accounts for 20% of the 350-401 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–16 in this domain), expect 3–4 from this objective — we provide 20 practice questions to prepare you well beyond it. (estimate)

20questions here

4free pages

7concepts

20%of the exam

Questions 6–10

6foundation · easy
What is the primary purpose of Control Plane Policing (CoPP)?
Select an answer first
7foundation · easy
Which configuration object is used to classify traffic for Control Plane Policing?
Select an answer first
8foundation · easy
After defining a class map and policy map for CoPP, which command applies the policy to the control plane?
Select an answer first
9foundation · easy
What is the order of processing for entries in an access control list?
Select an answer first
10application · medium
A network engineer is configuring ACLs on a router that connects the corporate LAN (10.10.0.0/16) to the internet. The goal is to prevent external hosts from initiating connections into the LAN while still allowing internal users to browse the web. The engineer applies an ACL to the router's WAN interface. Which ACL configuration and direction best achieves this objective?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 350-401

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-401” is a trademark of its owner, used for identification only.

5.2 Configure and Verify Infrastructure Security Features 350-401 Practice Questions (Page 2)

Questions 6–10

What is the primary purpose of Control Plane Policing (CoPP)?

Which configuration object is used to classify traffic for Control Plane Policing?

After defining a class map and policy map for CoPP, which command applies the policy to the control plane?

What is the order of processing for entries in an access control list?

Keep studying — 5.0 Security