Which two commands or command sets configure and verify a CoPP policy that permits SNMP from the management server to router R1 while protecting the control plane? (Choose two.)

The first correct option configures CoPP. It defines an access list to identify SNMP traffic from the management server (10.0.1.4) to the router (10.0.1.2). A class map matches this access list. A policy map then applies policing to this class, allowing conforming and exceeding traffic to transmit but dropping violating traffic, which protects the control plane from excessive SNMP. Finally, the service policy applies this policy map to the control plane. The second correct option, "show policy-map control-plane," verifies the CoPP policy applied to the control plane, showing its status and statistics. "show ip interface brief" displays interface status, not CoPP. "show quality-of-service-profile" is not a standard Cisco IOS XE command for CoPP verification. The incorrect configuration option uses "violate-action transmit," which defeats the purpose of CoPP by allowing violating traffic to pass, thus failing to protect the control plane.