CoPP limits routing protocol traffic to 1 Mbps and Telnet/SSH to 500 kbps. The policy-map PM-COPP uses class-maps that reference access-group 100 but no traffic is being policed and CPU is high. Which configuration resolves the issue?

The correct answer resolves two issues: the incorrect application of CoPP and the misconfiguration of access lists. First, control-plane no service-policy output PM-COPP service-policy input PM-COPP correctly applies the CoPP policy to the input of the control plane, where such traffic is processed, rather than the output. CoPP protects the router's CPU from excessive inbound traffic. Second, the original configuration used access-group 100 for both routing protocols and Telnet/SSH, which is incorrect. The updated access lists (access-list 100 for routing protocols, access-list 101 for management traffic) and the class-map CM-MGMT correctly separate and identify the traffic types for proper policing. The other options either only address one part of the problem or introduce new errors, like applying the policy to the output or incorrectly defining access lists.