A network engineer is troubleshooting high CPU utilization on a router. The engineer suspects that a specific type of traffic is overwhelming the control plane. The engineer wants to configure a threshold that will drop excessive traffic while allowing normal traffic. Which configuration should be applied?

Configure a CoPP policy with a police rate that matches the normal traffic rate and a burst size that accommodates bursts.

Set the police rate to a very high value to ensure no traffic is dropped.

Use an ACL to permit only specific source IP addresses.

Set the police rate to zero to drop all traffic of that type.

CCIE Security

Domain 3Objective 2

3.2 Management Plane Protection Techniques CCIE-SECURITY Practice Questions (Page 4)

Part of the 3.0 Security Infrastructure domain, which accounts for 15% of the CCIE-SECURITY exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 1–1 from this objective — we provide 16 practice questions to prepare you well beyond it. (estimate)

16questions here

4free pages

7concepts

15%of the exam

Questions 16–16

16application · medium
A network engineer is troubleshooting high CPU utilization on a router. The engineer suspects that a specific type of traffic is overwhelming the control plane. The engineer wants to configure a threshold that will drop excessive traffic while allowing normal traffic. Which configuration should be applied?
Select an answer first

Finished these 1 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CCIE-SECURITY

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “CCIE-SECURITY” is a trademark of its owner, used for identification only.

3.2 Management Plane Protection Techniques CCIE-SECURITY Practice Questions (Page 4)

Questions 16–16

Keep studying — 3.0 Security Infrastructure