A museums and culture department sees SNMP and SSH floods driving high CPU on civic core routers while transit forwarding still matters. Which feature most directly rate-limits abusive traffic to the route processor?
Select an answer to reveal the explanation.
Short Explanation
CoPP is the bouncer for the router’s brain—SNMP and SSH floods get rate-limited before they pin the CPU. Data-plane forwarding can keep working while the control plane stays protected.
Full Explanation
Control Plane Policing applies MQC-style classify-and-police policy to traffic destined for the route processor, protecting CPU from floods of management and control protocols such as SNMP and SSH. It is the primary IOS XE tool for this class of attack surface. Port security, IPSG, and PVLAN solve access-layer or spoofing problems and do not replace CoPP for RP protection.