Refer to the exhibit. Which two statements are correct? (Choose two.)
R# show policy-map control-plane
- The F0-IN policy is applied to the data plane.
- 30 packets have conformed to the TCP-C policing rate.
- Access list 150 is used to classify CoPP traffic.
- A total of 1137 packets have been rate limited by the CoPP policy.
- A total of 120 packets matched the TCP-C class map.
Explanation: The provided options can be verified using the logic of Control Plane Policing (CoPP) and the output of the show policy-map control-plane command:
- Control Plane vs. Data Plane: The command show policy-map control-plane is specifically used to verify the status of activity on the control plane. CoPP treats the control plane as a separate entity to protect the route processor from being overwhelmed by traffic. Therefore, any policy shown in this output is applied to the control plane, not the data plane.
- Traffic Classification: In the Modular QoS CLI (MQC) framework used by CoPP, class maps are used to categorize traffic, often by referencing an Access Control List (ACL). The output line Match: access-group [Number/Name] explicitly identifies which ACL is being used to classify the packets for that specific class. If the exhibit shows "Match: access-group 150," then ACL 150 is the classification tool.
- Packet Match Counts: When viewing the output for a specific class-map, the first line of statistics (e.g., 120 packets, 7200 bytes) indicates the total number of packets that have matched that class since the counters were last cleared.
- Policing Actions: The police section of the output further breaks down these matches into conformed (packets within the rate limit) and exceeded (packets over the limit). "Rate limited" typically refers to the exceeded packets that were dropped by the policy.
Based on the sources, identifying the ACL used for matching and the total packets matched are the standard ways to interpret this verification command.
Related exam: Modules 14 – 16: Checkpoint Exam: Network Security Answers (CCNP ENCOR v9)
