Exam 300-410 topic 1 question 431 discussion

Actual exam question from Cisco's 300-410

Question #: 431
Topic #: 1

The network administrator configured CoPP so that all SNMP traffic from Cisco Prime located at 192.168.1.11 toward the router CPU is limited to 1000 kbps. Any traffic that exceeds this limit must be dropped.

access-list 100 permit udp any any eq 161
!
class-map CM-SNMP
match access-group 100
!
policy-map PM-COPP
class CM-SNMP
police 1000 conform-action transmit
!
control-plane
service-policy input PM-COPP

The network administrator is not getting the desired result for the SNMP traffic and SNMP traffic is getting dropped frequently. Which set of configurations resolves the issue?

A. no access-list 100
access-list 100 permit tcp host 192.168.1.11 any eq 161
B. no access-list 100
access-list 100 permit udp host 192.168.1.11 any eq 161
!
policy-map PM-COPP
class CM-SNMP
no police 1000 conform-action transmit
police 1000000 conform-action transmit
!
control-plane
no service-policy input PM-COPP
!
interface E 0/0
service-policy input PM-COPP
!
interface E 0/1
service-policy input PM-COPP
C. no access-list 100
access-list 100 permit udp host 192.168.1.11 any eq 161
!
policy-map PM-COPP
class CM-SNMP
no police 1000 conform-action transmit
police 1000000 conform-action transmit
D. policy-map PM-COPP
class CM-SNMP
no police 1000 conform-action transmit
police 1000000 conform-action transmit

Show Suggested Answer

Suggested Answer: C 🗳️

by HungarianDish_111 at May 20, 2023, 8:37 p.m.

Comments

Submit Cancel

HungarianDish_111

Highly Voted 1 year, 11 months ago

Selected Answer: C

Agree on "C", because it is more specific than "D". ("D" could work, too.) 1000 kbps = 1 000 000 bits per second => bps is used in CoPP, so this value needs to be changed. The ACL syntax for matching the interesting traffic: access-list 100 permit udp host <snmp manager> any <snmp agents> eq 161 (or eq snmp) Example: https://community.cisco.com/t5/routing/acl-help/td-p/2788816/page/2

upvoted 6 times

...

C1789

Most Recent 7 months, 2 weeks ago

I would have to go C even when technically D would work since we already defined the access list and policy previously. Cisco can be so anoying sometimes

upvoted 1 times

...

[Removed]

9 months ago

Selected Answer: C

C is corerct

upvoted 1 times

...

Horsefeathers

1 year, 2 months ago

Selected Answer: C

C is the closest but none of the options contains "exceed-action drop".

upvoted 1 times

...

inteldarvid

1 year, 9 months ago

Selected Answer: C

yes option C correct

upvoted 1 times

...

Exam 300-410 All Questions

View all questions & answers for the 300-410 exam

Exam 300-410 topic 1 question 431 discussion

Comments

HungarianDish_111

C1789

[Removed]

Horsefeathers

inteldarvid

SY0-701