Exam 350-401 All QuestionsBrowse all questions from this exam
Question 289

Which configuration restricts the amount of SSH traffic that a router accepts to 100 kbps?

A.

B.

C.

D.

    Correct Answer:

    The correct configuration to restrict the amount of SSH traffic that a router accepts to 100 kbps is C. In this configuration, the policy map 'CoPP_SSH' is applied to the control plane, which manages the router's processor and memory, ensuring that traffic directed to the router itself is limited to 100 kbps. The access list 'CoPP_SSH' permits TCP traffic on port 22 (used for SSH), and the 'police cir 100000' command enforces the traffic rate limit. This effectively applies a traffic policy at the control plane, protecting the router's resources.

Discussion
examShark

The given answer is correct

seven_legs

The given answer is correct (C) as the configuration is blocking traffic to the control plane of the appliance using Control Plane Policing (CoPP).

Nickelkeep

The correct answer is A permit tcp any any eq 22

error_909

its C, please review this topic.

timtgh

They all say that, except for B.

danman32

Not that either is the correct answer, but can anyone spot the difference between answer A and B?

danman32

OK, found it thanks to discussion. A has permit 22, B has deny 22.

Badger_27

Another spot the difference challenge

monoki

do you still see the 350-401 exam on the site? i can't find it, it says 404 error for all the cisco exams.

Zendahr

correct

SeMo0o0o

C is correct

SeMo0o0o

.........................

sayed_2908

C and D are the same??

RREVECO

NOPE C) =Traffic generated by ROUTER that matches access list CoPP_SSH is policed. D) =Traffic passing through ROUTER that matches access list CoPP_SSH is policed.

Claudiu1

just a small correction: C) = traffic RECEIVED by the ROUTER that matches access list CoPP_SSH is policed. This is because the policy-map is applied using 'input' keyword.

wr4net

transit keyword = through router