A remote branch must enforce a 10 Mbps outbound limit but avoid dropping bursty interactive traffic. Which statement correctly describes shaping behavior that meets this requirement?

Shaping is the correct choice because it buffers excess packets that exceed the configured rate, smoothing out bursty traffic and introducing a controlled queuing delay rather than immediately dropping packets. This prevents drops for interactive traffic during bursts while still enforcing the 10 Mbps limit over time. Policing, by contrast, immediately drops or marks packets that exceed the rate, which would negatively impact bursty interactive traffic. Shaping does not rewrite DSCP values as its primary function, nor does it strip 802.1Q tags; these are separate QoS mechanisms.