Which restrictions apply when configuring Control Plane Policing (CoPP) on Cisco devices? (Choose two.)

The "log" keyword is not supported with CoPP access-list entries because CoPP is designed to protect the control plane from excessive traffic, not to log every packet. Logging would add significant overhead and potentially defeat the purpose of CoPP. CEF (Cisco Express Forwarding) is a prerequisite for CoPP; it must be enabled, not disabled, for CoPP to function. CoPP relies on CEF for efficient packet classification and policing. CoPP has specific limitations on the match types it supports. The only match types available are "ip precedence," "ip dscp," and "access-group." This is because CoPP focuses on classifying and policing control plane traffic based on these common IP header fields. Other match types, such as those used for data plane QoS, are not applicable to CoPP. Both standard and extended access lists are supported with CoPP, allowing for flexible traffic classification.