An engineer must configure and validate a CoPP policy that allows the network management server to monitor router R1 via SNMP while protecting the control plane. Which two commands or command sets must be used? (Choose two.)
D does not have any protections for the control plane.
Conform action = transmit
Exceed action = transmit
violate action = transmit
No matter what, all traffic will be transmitted to the control plane, which doesn't protect it.
A does at least have a violate-action = drop, so that's more protection than D gives.
I think is D and E as well
A option has this ACL 150:
access-list 150 permit udp 10.0.1.4 0.0.0.0 host 10.0.1.2 eq snmp
access-list 150 permit udp 10.0.1.4 0.0.0.0 eq snmp host 10.0.1.2
But D option only:
access-list 150 permit udp 10.0.1.4 0.0.0.0 host 10.0.1.2 eq snmp
A option has a violation-action drop, but D option has a violation-action transmit
the SNMP traffic will be never dropped
So, ACL would not be dropping traffic by its implicit deny? Would not the violate-action drop be applied only for the police 8000? Besides, Option A ACL second line does not make much of a sense having snmp polling permitted on to a server IMO.
But D only has "transmit" statements, so not much of a protection.
E is only a show command and the question is for "must configure" so also not a perfect match, but maybe the best of the options.
agree, but I can;t help but wonder why "access-list 150 permit udp 10.0.1.4 0.0.0.0 eq snmp host 10.0.1.2" is here. Why would 10.0.1.4 send traffic sourced with port 161
upvoted 2 times
...
...
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
dragonwise
Highly Voted 1 year, 9 months agomarkymark874
Highly Voted 2 years ago[Removed]
Most Recent 7 months, 3 weeks agoRose66
1 year, 12 months agoforccnp
2 years agoa197cbf
6 months, 2 weeks agoPS5
2 years, 1 month agoFeliphus
2 years, 1 month agormonteroherrera
1 year, 4 months agoWrad
2 years agoRexChen
2 years, 1 month agoZizu007
2 years, 1 month agofernandocirino
2 years, 2 months agoClaudiu1
10 months, 4 weeks ago