An operator plans to mitigate excessive SNMP and ICMP traffic to the router CPU. Which statement about Control Plane Policing (CoPP) is correct?

CoPP (Control Plane Policing) is a feature designed to protect a router's CPU from excessive traffic, which could lead to performance degradation or denial-of-service attacks. It works by applying a quality of service (QoS) service policy directly to the control plane. This policy classifies incoming packets destined for the CPU (like SNMP, ICMP, routing protocols) and then applies rate-limiting or dropping actions based on configured rules. This ensures that legitimate control plane traffic is processed while malicious or excessive traffic is policed, preventing CPU overload. The incorrect options are: CoPP does not encrypt control-plane packets; its purpose is traffic policing, not encryption. CoPP is widely supported across Cisco IOS, IOS XE, and NX-OS, making the statement about its unavailability on IOS incorrect. CoPP does not automatically drop all BGP packets; it allows for granular control to classify and rate-limit specific traffic types, including BGP, based on policy, not a blanket drop.