QoS Per-Hop Behaviors, Classification, Marking, Queuing, and Traffic Shaping/Policing

27 questions

All types27 Multiple choice14 Multiple select6 Matching7

A network administrator is configuring Quality of Service (QoS) classification using Differentiated Services (DiffServ) on an enterprise router. How many bits are allocated to the Differentiated Services Code Point (DSCP) field within the IPv4 Type of Service (ToS) byte?

6 bits

3 bits

8 bits

4 bits

Show answer & explanation

Answer: 6 bits

Answer

6 bits are allocated to the DSCP field within the IPv4 header.

The correct option stating 6 bits is right because Differentiated Services (DiffServ) redefines the 8-bit IPv4 Type of Service (ToS) byte such that the first 6 bits are used for the DSCP value, providing 64 different classification values (

0-63

). The remaining 2 bits are used for Explicit Congestion Notification (ECN).

Step-by-Step Solution

Identify the IPv4 header field used for Differentiated Services QoS classification.

The IPv4 header contains an 8-bit Type of Service (ToS) byte (also referred to as the Differentiated Services field).

DiffServ redefines the ToS byte to provide backward-compatible QoS classification capabilities.

Determine the allocation of bits within the ToS byte for DSCP marking.

The 6 most significant bits (

2^6 = 64

possible values) form the DSCP field, while the remaining 2 least significant bits are reserved for Explicit Congestion Notification (ECN).

This 6-bit field allows granular classification of traffic into Per-Hop Behaviors (PHBs) such as Expedited Forwarding (EF) and Assured Forwarding (AF).

Key Concept

DSCP Field Bit Length and Structure

Question 2Question →

A network administrator configures a Cisco router WAN egress interface with a Modular QoS CLI (MQC) policy map. The policy assigns real-time Voice over IP (VoIP) traffic to a class using the `priority 512` command, while transactional data is assigned to a class using the `bandwidth 2048` command. During a period of interface congestion, incoming voice traffic spikes to $768\text{ kbps}$ . Which statement accurately describes how the router handles the voice traffic that exceeds the $512\text{ kbps}$ allocated threshold?

The router buffers the excess

256\text{ kbps}

of voice packets in memory and delays their transmission until link congestion clears.

The router drops the excess

256\text{ kbps}

of voice traffic using a built-in strict priority policer to prevent starving other bandwidth-guaranteed queues.

The router transmits all

768\text{ kbps}

of voice traffic immediately because strict priority queues override all configured bandwidth limits during congestion.

The router automatically remarks the excess

256\text{ kbps}

of voice traffic to a lower DSCP value and forwards it into the default class queue.

Show answer & explanation

Answer: The router drops the excess $256\text{ kbps}$ of voice traffic using a built-in strict priority policer to prevent starving other bandwidth-guaranteed queues.

Answer

The router drops the excess voice traffic exceeding the

512\text{ kbps}

threshold using a built-in policing mechanism to protect other queues from bandwidth starvation during congestion.

Low Latency Queuing (LLQ) uses the `priority` command to create a strict priority queue for delay-sensitive traffic such as voice. To prevent a rogue stream or burst of voice traffic from starving other queues (configured via `bandwidth` statements) during link congestion, LLQ applies a built-in policer to the priority queue. Traffic offered to the priority queue up to the configured limit (

512\text{ kbps}

) is serviced ahead of all other queues. Any excess traffic beyond

512\text{ kbps}

during congestion is dropped by the policer.

Step-by-Step Solution

Identify the QoS queuing feature configured by the `priority` command.

The `priority` command configures Low Latency Queuing (LLQ), creating a strict priority queue alongside Class-Based Weighted Fair Queuing (CBWFQ) classes.

LLQ provides strict priority servicing for delay-sensitive traffic like voice.

Analyze how LLQ behaves when traffic in the priority queue exceeds its allocated bandwidth during interface congestion.

To prevent strict priority traffic from monopolizing the interface and starving CBWFQ classes, LLQ implements an implicit policer built into the priority queue.

Without policing, priority traffic could burst endlessly and cause complete packet drop/starvation in other classes.

Determine the action taken on the

256\text{ kbps}

burst exceeding the

512\text{ kbps}

limit.

The internal policer drops all incoming voice traffic that exceeds

512\text{ kbps}

while congestion persists.

Policing drops out-of-profile packets immediately rather than buffering them.

Key Concept

Low Latency Queuing (LLQ) Priority Queue Policing

Estimated Time:2m 0s

Question 3Question →

An enterprise WAN edge router frequently transmits micro-bursts of database traffic that temporarily exceed the contract rate limit set by the service provider. The network engineer must implement a Quality of Service (QoS) mechanism on the egress WAN interface that regulates outbound transmission rates to match the provider's limit by holding excess packets in memory queues for later transmission rather than immediately dropping them. Which QoS mechanism should be configured on the router interface?

Traffic Shaping

Traffic Policing

Weighted Random Early Detection (WRED)

Explicit Congestion Notification (ECN)

Show answer & explanation

Answer: Traffic Shaping

Answer

Traffic Shaping is the correct mechanism because it uses software queues to buffer excess traffic and smooth out rate bursts before sending packets across the egress link.

Traffic Shaping is a traffic conditioning mechanism applied in the egress direction that buffers excess packets in memory queues when traffic exceeds the configured Committed Information Rate (CIR). It slowly releases packets over time, creating a smooth output rate that prevents service provider packet drops.

Step-by-Step Solution

Analyze the operational requirements stated in the scenario.

The requirement demands regulating outbound WAN traffic to a target rate while buffering bursty traffic instead of dropping it.

Understanding the difference between packet dropping and packet buffering key behavior is critical for QoS traffic conditioning selection.

Compare Traffic Shaping and Traffic Policing operational characteristics.

Traffic Shaping buffers out-of-profile packets in memory queues, whereas Traffic Policing drops or remarks out-of-profile packets.

Buffering enables smoothing of bursty traffic flows at the cost of slight delay, fulfilling the exact requirement.

Key Concept

Traffic Shaping vs. Traffic Policing Mechanisms

Question 4Question →

An enterprise network administrator is deploying Quality of Service (QoS) across access switch ports where desktop PCs are daisy-chained through Cisco IP Phones. Which two statements accurately describe Layer 2 and Layer 3 QoS field characteristics and trust boundary enforcement in this design?

Select all that apply

The 3-bit Class of Service (CoS) priority field is located in the IEEE 802.1Q header tag and is stripped when frames cross a Layer 3 routed boundary.

Extending a trust boundary to the Cisco IP Phone allows the switch to accept voice CoS values from the phone while re-marking untrusted data traffic from the PC to CoS 0.

Traffic policing configured on ingress access interfaces buffers non-conforming packet bursts until interface queue congestion clears.

Traffic policing on switch ingress queues delays out-of-profile voice packets in a dedicated Priority Queue (PQ) to prevent packet loss.

Show answer & explanation

Answer: The 3-bit Class of Service (CoS) priority field is located in the IEEE 802.1Q header tag and is stripped when frames cross a Layer 3 routed boundary.; Extending a trust boundary to the Cisco IP Phone allows the switch to accept voice CoS values from the phone while re-marking untrusted data traffic from the PC to CoS 0.

Answer

The two correct statements are that the 3-bit Class of Service (CoS) field resides within the IEEE 802.1Q header tag and is stripped when traversing a Layer 3 boundary, and extending the trust boundary to a Cisco IP Phone allows trusting phone voice markings while re-marking untrusted PC traffic to CoS 0.

Layer 2 Class of Service (CoS) consists of 3 bits in the 802.1Q header tag, which is removed whenever a router decapsulates an Ethernet frame at a Layer 3 boundary. Additionally, extending a trust boundary to a Cisco IP Phone ensures that voice traffic from the phone retains high priority while untrusted PC frames passing through the phone are reset to CoS 0 / DSCP 0.

Step-by-Step Solution

Analyze Layer 2 vs Layer 3 QoS header field encapsulation

CoS is a 3-bit field (Priority Code Point / PCP) inside the 802.1Q VLAN tag. Because Layer 2 tags are stripped by a router at a L3 hop, CoS markings do not survive routing unless translated into 6-bit L3 DSCP markings within the IP header.

Differentiates L2 link-specific marking from L3 end-to-end IP marking.

Evaluate Cisco IP Phone trust boundary behavior

Using commands such as `mls qos trust device cisco-phone`, the switch trusts the CoS/DSCP generated by the phone itself but forces untrusted PC traffic arriving at the phone's switch port down to CoS 0.

Prevents end-user PCs from spoofing high-priority QoS markings to gain unauthorized bandwidth prioritization.

Differentiate Traffic Policing mechanics from Traffic Shaping and Queuing

Policers measure traffic against a CIR and enforce rate limits by dropping or remarking excess frames immediately without buffering. Buffering excess burst packets is exclusively performed by shapers.

Refutes distractors that claim policing buffers or queues non-conforming traffic.

Key Concept

QoS Trust Boundaries, CoS vs DSCP Header Lifecycles, and Policing Mechanics

Estimated Time:2m 0s

Question 5Question →

An enterprise network engineer is designing a Quality of Service (QoS) traffic conditioning policy on a WAN edge router connecting to a service provider with a Committed Information Rate (CIR) lower than the physical link bandwidth. Which two statements accurately describe the operational mechanics and application constraints of traffic shaping versus traffic policing in this scenario?

Select all that apply

Traffic shaping buffers excess packets in a queue to smooth out bursts, resulting in a regulated transmission rate across the egress interface.

Traffic policing immediately drops or remarks packets exceeding the configured threshold without utilizing memory buffers.

Traffic policing places out-of-profile burst packets into egress queues to prevent packet loss during congestion state transitions.

Traffic shaping can be configured on both ingress and egress directions of an interface, whereas traffic policing is strictly limited to egress traffic.

Show answer & explanation

Answer: Traffic shaping buffers excess packets in a queue to smooth out bursts, resulting in a regulated transmission rate across the egress interface.; Traffic policing immediately drops or remarks packets exceeding the configured threshold without utilizing memory buffers.

Answer

Traffic shaping buffers excess packets to smooth out traffic bursts for steady egress transmission, whereas traffic policing immediately drops or remarks packets exceeding specified limits without buffering.

Traffic shaping smooths out traffic bursts by delaying packets in buffer memory, producing a predictable egress rate. In contrast, traffic policing does not buffer packets; it acts immediately on out-of-profile traffic by dropping or remarking excess packets.

Step-by-Step Solution

Analyze the functional mechanism of traffic shaping.

Recognize that shaping buffers out-of-profile packets in software queues and schedules them for later transmission to yield a smooth rate.

Shaping is designed to handle bursty traffic without immediate packet drops when connecting to lower-speed CIR lines.

Analyze the functional mechanism of traffic policing.

Recognize that policing acts immediately on packets that exceed the token bucket criteria by either dropping them or remarking their QoS headers.

Policing enforces strict rate boundaries without delay or buffer allocations.

Evaluate directionality constraints for both QoS mechanisms.

Confirm that shaping is supported only outbound (egress) due to buffer management requirements, whereas policing can function inbound (ingress) and outbound (egress).

Queuing engine operations require egress scheduling control.

Key Concept

Operational differences between QoS Traffic Shaping and Traffic Policing

Question 6Question →

A network administrator applies a Quality of Service (QoS) policy to an ingress interface of an enterprise router to cap incoming data transfers at a rate of 10 Mbps. During peak usage periods, application traffic exceeding 10 Mbps experiences immediate packet drops rather than transmission delays. Which statement accurately explains why this traffic behavior occurs?

Traffic policing is configured on the interface, which drops or remarks out-of-profile traffic exceeding the rate limit without buffering packets.

Traffic policing buffers non-conforming packets in software queues until the burst ends, but packet drops occur because the queue limit is reached.

Traffic shaping is active on the ingress interface, but shaping policies drop packets by default when applied in the inbound direction.

Traffic policing automatically converts excess traffic into low-priority Class of Service (CoS) frames, which are then dropped by ingress switch interfaces.

Show answer & explanation

Answer: Traffic policing is configured on the interface, which drops or remarks out-of-profile traffic exceeding the rate limit without buffering packets.

Answer

Traffic policing is configured on the interface, which drops or remarks out-of-profile traffic exceeding the rate limit without buffering packets.

Traffic policing meters bandwidth usage against a specified rate limit. When traffic exceeds this target rate (the Committed Information Rate), the policer immediately drops the non-conforming traffic or remarks its DSCP/IP Precedence value. Because policing does not buffer packets, bursty traffic above the limit experiences immediate packet loss.

Step-by-Step Solution

Analyze the observed traffic behavior

Excess traffic exceeding 10 Mbps is immediately dropped rather than delayed.

Identifying whether packets are dropped immediately or held in a queue distinguishes policing from shaping.

Compare Traffic Policing vs. Traffic Shaping mechanics

Traffic policing enforces a hard rate limit by dropping or remarking excess packets without buffering. Traffic shaping uses queues/buffers to delay excess packets and smooth out traffic peaks.

Policers do not buffer out-of-profile traffic, whereas shapers do.

Select the option describing policing mechanics accurately

The statement explaining that policing drops or remarks out-of-profile traffic without buffering correctly accounts for the immediate packet drops.

This directly aligns with standard Cisco QoS per-hop mechanisms.

Key Concept

Operational differences between QoS Traffic Policing (dropping/remarking without queues) and Traffic Shaping (buffering/smoothing)

Question 7Question →

An enterprise network administrator is implementing Quality of Service (QoS) traffic conditioning mechanisms on WAN edge routers. Which two statements correctly describe the operational differences between traffic policing and traffic shaping? (Select two.)

Select all that apply

Traffic policing can be configured on both ingress and egress interfaces to drop or remark packets that exceed the specified target rate.

Traffic shaping uses memory queues to temporarily buffer bursty traffic exceeding the configured rate, smoothing outbound traffic flow on egress interfaces.

Traffic policing holds out-of-profile packets in hardware memory queues until link bandwidth becomes available, avoiding packet drops.

Traffic shaping is applied on ingress interfaces to drop bursty traffic before packets enter the router internal switching fabric.

Show answer & explanation

Answer: Traffic policing can be configured on both ingress and egress interfaces to drop or remark packets that exceed the specified target rate.; Traffic shaping uses memory queues to temporarily buffer bursty traffic exceeding the configured rate, smoothing outbound traffic flow on egress interfaces.

Answer

The two correct statements are that traffic policing can be applied to both ingress and egress interfaces to drop or remark packets exceeding the target rate, and traffic shaping uses queues on egress interfaces to temporarily buffer bursty traffic and smooth outbound delivery.

Traffic policing and shaping handle non-conforming traffic differently. Policing functions on both ingress and egress directions by dropping or remarking excess packets without buffering. In contrast, shaping is supported strictly on egress interfaces, utilizing memory queues to buffer bursty traffic and smooth outbound flow.

Step-by-Step Solution

Evaluate the directional capability and packet handling mechanism of traffic policing.

Policing operates in both ingress and egress directions without buffering, handling excess traffic instantaneously by dropping packets or remarking DSCP/CoS values.

Policing enforces rate boundaries without introducing queuing delay.

Evaluate the directional capability and packet handling mechanism of traffic shaping.

Shaping applies strictly to egress traffic and utilizes memory queues to buffer excess packets, smoothing bursts to fit within a configured rate.

Shaping prevents packet drops during brief bursts at the expense of potential queuing delay and jitter.

Key Concept

QoS Traffic Conditioning: Policing vs Shaping Operational Mechanics

Estimated Time:1m 30s

Question 8Question →

A network administrator notices that bursty data transfers sent across a 100 Mbps physical interface to a service provider are experiencing heavy packet loss. The service provider enforces a strict 20 Mbps Committed Information Rate (CIR) using a policer at their ingress edge. Which Quality of Service (QoS) mechanism should the administrator configure on the local router's egress interface to prevent provider-side packet drops by smoothing out the traffic rate?

Traffic shaping to buffer out-of-profile packets in memory and release them at a steady rate matching the contracted limit.

Traffic policing to store non-conforming packets in a dynamic queue until interface bandwidth becomes available.

Low Latency Queuing (LLQ) to strictly prioritize all bursty data packets over control traffic.

Class-Based Weighted Fair Queuing (CBWFQ) to drop lower-priority data packets locally before they reach the provider line.

Show answer & explanation

Answer: Traffic shaping to buffer out-of-profile packets in memory and release them at a steady rate matching the contracted limit.

Answer

Traffic shaping to buffer out-of-profile packets in memory and release them at a steady rate matching the contracted limit.

Traffic shaping is designed to rate-limit outbound traffic to a contracted Committed Information Rate (CIR) by buffering bursts in memory and transmitting packets continuously at a steady rate. This prevents the provider's ingress policer from seeing rate spikes and dropping packets.

Step-by-Step Solution

Analyze the problem scenario and bandwidth mismatch.

The local physical interface sends traffic at 100 Mbps, but the service provider polices incoming traffic at 20 Mbps.

Bursty transmissions exceeding 20 Mbps cause the provider's policer to drop excess packets immediately.

Compare Quality of Service traffic conditioning mechanisms (Policing vs. Shaping).

Traffic policing drops/remarks excess packets without queuing, whereas traffic shaping buffers excess packets in memory queues to smooth out micro-bursts.

To avoid packet loss while adhering to a sub-rate CIR on a faster physical link, outbound traffic must be shaped.

Select the appropriate egress QoS tool.

Configure egress traffic shaping targeting the 20 Mbps rate.

Shaping smooths egress burstiness, holding out-of-profile packets in a queue rather than letting the provider's policer discard them.

Key Concept

Differences in operational mechanics between QoS Traffic Policing and Traffic Shaping

Question 9Question →

Match each Quality of Service (QoS) mechanism, field, or per-hop behavior on the left to its corresponding operational description or header specification on the right.

Click a left item, then click its matching right item

Show answer & explanation

Answer

Assured Forwarding (AF31) corresponds to the 6-bit DSCP value specifying Class 3 traffic with low drop probability (011010); Class of Service (CoS) corresponds to the 3-bit PCP field in the IEEE 802.1Q header; Traffic Shaping corresponds to buffering excess egress packets in memory queues to smooth traffic bursts; Strict Priority Queuing corresponds to servicing delay-sensitive traffic ahead of all other queues.

Each term correctly aligns with its exact QoS definition: AF31 represents DSCP value 26 (011010), CoS utilizes the 3-bit 802.1Q header field, Traffic Shaping smooths bursts via packet buffering, and Strict Priority Queuing services high-priority packets ahead of all other queues.

Step-by-Step Solution

Identify Layer 3 marking specifications for Per-Hop Behaviors (PHBs).

Assured Forwarding (AF) uses 6 bits in the DSCP field. AF31 breaks down into Class 3 (

3 \times 8 = 24

, or binary 011000) with low drop probability (add 2, resulting in decimal 26 or binary 011010).

DSCP AF values use the formula

8x + 2y

where

x

is the class (1-4) and

y

is the drop precedence (1-3).

Identify Layer 2 marking specifications.

Class of Service (CoS) resides exclusively in the 3-bit Priority Code Point (PCP) field of the 802.1Q VLAN tag header.

CoS is a Layer 2 QoS marking mechanism and does not persist across non-trunked Ethernet hops or Layer 3 boundaries.

Differentiate between traffic conditioning mechanisms (shaping vs policing).

Traffic Shaping uses software queues to buffer packets that exceed the configured rate, smoothing egress flow.

Unlike policing (which drops or remarks excess packets), shaping delays out-of-profile traffic by placing it into memory queues.

Evaluate queuing algorithms and packet scheduling.

Strict Priority Queuing always services its designated queue first until empty before serving lower-priority queues.

Strict priority scheduling provides minimal latency for real-time traffic (such as voice), but requires policing to prevent queue starvation of other traffic classes.

Key Concept

QoS Classification, Marking, Queuing, and Traffic Conditioning Mechanics

Question 10Question →

Match each Quality of Service (QoS) field or traffic conditioning mechanism on the left to its correct header specification or operational characteristic on the right.

Click a left item, then click its matching right item

Show answer & explanation

Answer

IP Precedence matches the 3-bit Layer 3 ToS field; DSCP matches the 6-bit Layer 3 field in ToS/Traffic Class; ECN matches the 2-bit IP congestion notification field; Traffic Shaping matches the egress buffering mechanism.

Each item accurately maps to its defined QoS header specification or operational mechanics. IP Precedence uses 3 bits in the ToS byte; DSCP uses 6 bits in the ToS/Traffic Class byte; ECN uses 2 bits to signal congestion without packet drops; Traffic Shaping buffers excess packets on egress interfaces.

Step-by-Step Solution

Analyze header field bit lengths and layer classifications

Identify IP Precedence as the legacy 3-bit Layer 3 field (8 values) and DSCP as the modern 6-bit Layer 3 field (64 values).

Classification standards define specific bit positions within the 8-bit Type of Service byte.

Identify signaling and traffic conditioning functions

Map ECN to its 2-bit congestion notification role and Traffic Shaping to egress buffering.

ECN signals congestion proactively to TCP endpoints without packet loss, while traffic shaping buffers bursty packets to conform to a configured rate.

Key Concept

QoS Header Markings and Traffic Conditioning Functions

Estimated Time:1m 30s

Question 11Question →

A network administrator is designing a QoS marking policy to classify enterprise application traffic across both Layer 2 switch trunks and Layer 3 routed WAN links. Which statement accurately compares Class of Service (CoS) and Differentiated Services Code Point (DSCP) markings?

CoS relies on a 3-bit field located inside the 802.1Q VLAN tag, whereas DSCP uses a 6-bit field inside the IP header.

CoS uses a 6-bit field in the IP header, whereas DSCP uses a 3-bit Priority Code Point field in the Ethernet frame header.

CoS automatically buffers non-conforming bursty traffic in queues, whereas DSCP drops out-of-profile traffic at ingress.

CoS markings persist end-to-end across Layer 3 router hops, whereas DSCP markings are stripped when packets cross ethernet switches.

Show answer & explanation

Answer: CoS relies on a 3-bit field located inside the 802.1Q VLAN tag, whereas DSCP uses a 6-bit field inside the IP header.

Answer

Class of Service (CoS) relies on a 3-bit Priority Code Point (PCP) field within the Layer 2 802.1Q VLAN header, whereas Differentiated Services Code Point (DSCP) uses a 6-bit field within the Layer 3 IP header.

The statement identifying CoS as a 3-bit field inside the 802.1Q VLAN header and DSCP as a 6-bit field in the IP header is correct. CoS provides 8 priority levels (0 to 7) for Layer 2 tagged frames, while DSCP provides 64 values (0 to 63) in the Differentiated Services field of Layer 3 IP headers.

Step-by-Step Solution

Identify Layer 2 QoS classification mechanisms.

CoS (Class of Service / 802.1p) is defined in the 3-bit Priority Code Point field of an 802.1Q VLAN frame header, giving 8 possible priority levels (0-7).

Layer 2 headers are encapsulated per link and only exist on tagged Ethernet frames.

Identify Layer 3 QoS classification mechanisms.

DSCP (Differentiated Services Code Point) is defined in the 6-bit DiffServ field of the IPv4/IPv6 packet header, giving 64 possible code points (0-63).

Layer 3 headers persist across router hops end-to-end from source to destination.

Compare header locations and persistence capabilities.

CoS is restricted to tagged Layer 2 Ethernet trunks and is stripped by routers, while DSCP travels inside the IP packet across routed boundaries.

Routers decapsulate Layer 2 frames when forwarding IP packets, removing the 802.1Q tag containing CoS.

Key Concept

QoS Marking Fields (CoS 3-bit L2 vs DSCP 6-bit L3)

Question 12Question →

A network administrator is configuring QoS mechanisms on a branch router edge interface to manage traffic bursts that periodically exceed the committed contract rate. Which two statements accurately describe the operational characteristics of traffic shaping?

Select all that apply

Buffers excess packets in a queue and delays their transmission to smooth the outbound traffic flow.

Can only be implemented in the egress direction on a network interface.

Immediately drops out-of-profile packets as soon as the traffic rate exceeds the burst threshold.

Remarks out-of-profile traffic to a lower precedence value instead of delaying packet egress.

Show answer & explanation

Answer: Buffers excess packets in a queue and delays their transmission to smooth the outbound traffic flow.; Can only be implemented in the egress direction on a network interface.

Answer

Traffic shaping buffers excess packets in a queue to release them smoothly over time, and it can only be configured in the egress direction on an interface.

Traffic shaping is designed to smooth egress traffic rates by holding non-conforming packets in software queues and transmitting them as bandwidth becomes available. Because this queueing and scheduling process takes place before sending packets out of an interface, shaping is strictly an egress-only feature.

Step-by-Step Solution

Analyze the core operational mechanism of traffic shaping.

Traffic shaping retains packets in a queue when the traffic rate exceeds the configured rate (CIR) and transmits them gradually to achieve a regulated flow.

Understanding the role of internal buffers differentiates shaping from policing.

Determine the interface direction constraints for traffic shaping.

Since packets must enter an egress queue before being delayed and scheduled for transmission, shaping can only be applied in the egress direction.

Ingress interfaces cannot hold packets in an egress scheduling buffer.

Differentiate policing functions from shaping functions to rule out incorrect choices.

Actions such as dropping excess packets immediately or remarking packet header fields are characteristic of policing, which does not buffer traffic.

Policers handle traffic bursts by dropping or remarking rather than queueing.

Key Concept

Traffic Shaping vs. Traffic Policing Mechanisms

Estimated Time:1m 0s

Question 13Question →

An enterprise router connects to an Internet Service Provider over a 1 Gbps physical Ethernet interface, but the WAN contract strictly enforces a Committed Information Rate (CIR) of 50 Mbps. The network engineer notices that bursty corporate traffic periodically exceeds 50 Mbps, causing the service provider to immediately drop the non-conforming packets. Which Quality of Service (QoS) mechanism should be applied to the router's WAN egress interface to buffer excess packets during spikes and release them at a rate matching the 50 Mbps contract?

Traffic shaping

Traffic policing

Class-Based Weighted Fair Queuing (CBWFQ)

Expedited Forwarding (EF) DSCP marking

Show answer & explanation

Answer: Traffic shaping

Answer

Traffic shaping

Traffic shaping is designed to rate-limit outbound traffic by holding excess packets in a queue and scheduling them for delayed transmission. This smoothes out bursty traffic profiles so that egress rates do not exceed a service provider's sub-rate Committed Information Rate (CIR), preventing ISP packet drops.

Step-by-Step Solution

Analyze the network requirement and problem statement

The physical interface speed is 1 Gbps, but the ISP enforces a lower sub-rate CIR of 50 Mbps and drops bursts exceeding this limit.

When a physical link speed exceeds the purchased CIR, unconditioned egress traffic will burst at the line rate of 1 Gbps, triggering rate-limiting drops at the provider edge.

Compare traffic conditioning mechanisms (Policing vs Shaping)

Traffic policing discards or remarks out-of-profile traffic without buffering. Traffic shaping uses memory buffers to queue excess packets and transmit them at a metered pace matching the target rate.

To prevent tail drop at the provider edge during traffic spikes, the customer edge device must smooth output using queue buffering.

Select the mechanism that buffers bursts to match a CIR

Traffic shaping is the correct QoS technique designed specifically to buffer micro-bursts on egress and pace packet output to fit sub-rate WAN contracts.

Traffic shaping aligns egress throughput with the 50 Mbps CIR, preventing packet loss at the ISP's policing boundary.

Key Concept

Difference between Traffic Shaping (buffering traffic bursts to a CIR) and Traffic Policing (dropping/remarking excess traffic immediately)

Estimated Time:1m 15s

Question 14Question →

Match each Differentiated Services Code Point (DSCP) Per-Hop Behavior (PHB) standard on the left to its corresponding bit/decimal value and network application profile on the right.

Click a left item, then click its matching right item

Show answer & explanation

Answer

Expedited Forwarding (EF) matches DSCP 46 (voice/low-latency queue); Assured Forwarding 41 (AF41) matches DSCP 34 (high-priority data with low drop precedence); Class Selector 6 (CS6) matches DSCP 48 (network control traffic); Default Forwarding (DF) matches DSCP 0 (best-effort standard FIFO).

Each DiffServ PHB maps directly to a standardized 6-bit DSCP value: EF maps to DSCP 46 for priority low-latency queues, AF41 maps to DSCP 34 for high-priority low-drop data, CS6 maps to DSCP 48 for network control traffic, and DF maps to DSCP 0 for best-effort traffic.

Step-by-Step Solution

Identify the DSCP encoding and purpose of Expedited Forwarding (EF).

EF uses binary

101110

(DSCP 46) to provide a guaranteed low-delay, low-jitter expedited path for voice media.

RFC 2598 defines EF for real-time applications using a priority queue.

Determine the DSCP binary and decimal values for Assured Forwarding AF41.

For AF class

x

and drop precedence

y

(AF

xy

), the 6-bit DSCP structure is

xxxyy0

. For AF41,

x=4

(

100_2

) and

y=1

(

01_2

), giving binary

100010

(decimal 34).

AF41 allocates guaranteed bandwidth while maintaining low drop probability under congestion.

Map Class Selector 6 (CS6) to its corresponding 6-bit DSCP value.

Class Selector values set the 3 MSBs to match IP Precedence while zeroing the 3 LSBs, yielding binary

110000

(DSCP 48).

CS6 is reserved by network equipment for critical control traffic like OSPF and BGP routing updates.

Identify the characteristics of Default Forwarding (DF).

DF uses binary

000000

(DSCP 0).

DF describes standard best-effort traffic subject to FIFO queuing and tail drop when queues overflow.

Key Concept

DiffServ Per-Hop Behaviors (PHB) and DSCP Marking Standards

Question 15Question →

A network administrator is troubleshooting TCP application performance degradation on an enterprise egress WAN interface. Analysis shows that momentary traffic spikes above the contracted service rate are causing immediate packet drops, leading to TCP global synchronization and reduced throughput. Which QoS modification should be applied to the WAN interface to smooth out traffic bursts by delaying excess packets in a buffer rather than dropping them immediately?

Apply a traffic shaping policy on the egress interface to queue and smooth out excess bursts.

Apply a traffic policing policy on the egress interface to buffer out-of-profile packets until the next time interval.

Configure Class-Based Header Compression to shrink packet headers during traffic bursts.

Enable ingress traffic policing on the WAN router interface to hold burst packets until interface utilization drops.

Show answer & explanation

Answer: Apply a traffic shaping policy on the egress interface to queue and smooth out excess bursts.

Answer

Apply a traffic shaping policy on the egress interface to queue and smooth out excess bursts.

Traffic shaping regulates egress network traffic by holding excess packets in a buffer queue when traffic bursts exceed the configured Committed Information Rate (CIR). It then releases those packets smoothly over time, preventing packet drops and avoiding TCP global synchronization.

Step-by-Step Solution

Identify the cause of TCP global synchronization.

Immediate dropping of bursty packets by hard rate enforcement causes multiple TCP senders to slow down simultaneously.

When bursts exceed the rate limit and packets are discarded immediately, TCP sessions experience tail drop and enter slow start.

Compare traffic conditioning mechanisms (policing vs. shaping).

Policing discards or remarks non-conforming traffic without buffering. Shaping uses a software buffer to store excess packets and schedule them for later transmission.

To smooth bursts without dropping packets, a buffering mechanism (traffic shaping) is required.

Select the correct QoS policy implementation.

Configuring egress traffic shaping buffers out-of-profile traffic during short spikes and transmits it as rate tokens become available.

Traffic shaping is designed specifically for egress interface smoothing using packet queues.

Key Concept

Differences in operational mechanics between Traffic Shaping (buffering/smoothing) and Traffic Policing (dropping/remarking)

Question 16Question →

An enterprise router connects a branch office to the head office over a sub-rate Metro Ethernet circuit with a Committed Information Rate (CIR) of 20 Mbps on a 100 Mbps physical Ethernet handoff. Users report that during peak hours, TCP file transfers experience severe throughput degradation due to packet drops and retransmissions, while real-time UDP streams undergo frequent drops during bursts. An audit of the egress WAN interface reveals a QoS policy enforcing the 20 Mbps bandwidth limit using traffic policing. Which explanation correctly identifies why traffic shaping should be implemented instead of traffic policing on this egress interface?

Traffic shaping buffers excess out-of-profile packets in queues and transmits them smoothly over time up to the CIR rate, whereas traffic policing immediately drops or remarks packets exceeding the rate limit without buffering.

Traffic policing buffers non-conforming burst traffic until interface queue capacity opens, whereas traffic shaping immediately drops out-of-profile packets to prevent TCP window size expansion.

Traffic policing dynamically adjusts physical Layer 1 interface signaling speeds to match CIR limits, whereas traffic shaping alters Layer 2 framing headers to drop non-conforming packets.

Traffic shaping operates exclusively at Layer 2 using CoS bits to prioritize bursty data frames, whereas traffic policing operates at Layer 3 by rewriting IP TOS precedence values to drop packets.

Show answer & explanation

Answer: Traffic shaping buffers excess out-of-profile packets in queues and transmits them smoothly over time up to the CIR rate, whereas traffic policing immediately drops or remarks packets exceeding the rate limit without buffering.

Answer

Traffic shaping mitigates bursty traffic drops on sub-rate interfaces by storing out-of-profile packets in software queues and pacing their transmission at the CIR rate over time. Traffic policing does not buffer packets; non-conforming traffic exceeding the CIR is immediately dropped or remarked, leading to high TCP retransmissions and stream degradation during bursts.

Step-by-Step Solution

Analyze the operational behavior of Traffic Policing.

Traffic policing measures the traffic rate against a configured limit (such as CIR). Traffic that exceeds the profile is either immediately dropped or remarked to a lower priority (e.g., lower DSCP value). Policers do not buffer traffic, causing TCP window collapses and packet loss during traffic bursts.

Policing is designed for hard rate enforcement, usually applied inbound or at service provider handoffs.

Analyze the operational behavior of Traffic Shaping.

Traffic shaping measures the traffic rate against a configured CIR profile, but excess traffic above the rate limit is retained in software queues and scheduled for delayed transmission. This smoothes out bursty traffic profiles.

Shaping prevents packet loss caused by transient traffic bursts by using memory buffering, making it ideal for sub-rate Ethernet access links.

Compare policing versus shaping for the sub-rate WAN scenario.

Because the physical port operates at 100 Mbps while the ISP contract limits throughput to 20 Mbps CIR, bursty transmissions from the router fill the link at 100 Mbps burst rates. Traffic policing drops these bursts immediately. Traffic shaping holds excess packets in queues and meters them out at 20 Mbps, preventing TCP retransmissions and stream drops.

Shaping is recommended egress on sub-rate WAN interfaces to avoid provider policer drops and smooth bursty traffic.

Key Concept

Difference between QoS Traffic Policing and Traffic Shaping

Question 17Question →

Which of the following Quality of Service (QoS) mechanisms and header fields correctly match their corresponding binary/decimal representations or operational behaviors? Match each QoS term on the left with its correct description on the right.

Click a left item, then click its matching right item

Show answer & explanation

Answer

Expedited Forwarding (EF) maps to DSCP 46 (

101110_2

) for low-latency traffic. Assured Forwarding 31 (AF31) maps to DSCP 26 (

011010_2

) representing Class 3 with low drop probability. IEEE 802.1Q CoS maps to the 3-bit PCP field in the Layer 2 Ethernet tag. Traffic Policing maps to rate-limiting that drops or remarks traffic without queuing delay.

Each QoS term accurately matches its technical bit value or functional mechanism: Expedited Forwarding (EF) is DSCP 46 (

101110_2

), Assured Forwarding AF31 is DSCP 26 (

011010_2

), IEEE 802.1Q CoS uses the 3-bit PCP field, and Traffic Policing limits bandwidth by dropping or remarking excess traffic without buffering.

Step-by-Step Solution

Analyze Expedited Forwarding (EF) DSCP bit structure

EF uses DSCP binary

101110_2

, which converts to decimal

46

. It is designed for strict low-latency priority queuing.

EF is a single standardized Per-Hop Behavior for real-time traffic.

Calculate Assured Forwarding (AF31) DSCP decimal value

For AFxy, Class

x=3

yields binary

011

, Drop precedence

y=1

yields binary

01

, followed by trailing

0

. This forms

011010_2 = 26

AF class and drop precedence bits directly map to their DiffServ field values.

Identify Layer 2 classification header location and field size

Layer 2 CoS relies on the

3

-bit Priority Code Point (PCP) field within the IEEE 802.1Q VLAN header tag.

Ethernet frames lack IP TOS headers, so priority is encoded inside the 802.1Q tag.

Differentiate Traffic Policing mechanics from Traffic Shaping

Policing compares incoming packet rates against CIR and instantly drops or remarks out-of-profile traffic without buffering.

Shaping buffers excess traffic to smooth bursts, whereas policing acts immediately without introducing latency.

Key Concept

QoS Per-Hop Behaviors, Classification, Marking, Queuing, and Traffic Shaping/Policing

Question 18Question →

A network engineer needs to manage egress bandwidth on a WAN interface. The goal is to smooth out traffic bursts by holding excess packets in a buffer for later transmission rather than immediately dropping them when traffic exceeds the configured rate limit. Which Quality of Service (QoS) mechanism should the engineer configure?

Traffic shaping

Traffic policing

Class-Based Weighted Fair Queueing

DSCP re-marking

Show answer & explanation

Answer: Traffic shaping

Answer

Traffic shaping is the QoS mechanism that buffers excess packets in a queue to smooth out traffic bursts and enforce a maximum output rate.

Traffic shaping smooths out traffic rate spikes by queuing (buffering) excess packets and scheduling them for delayed transmission. This prevents packet loss during brief traffic spikes.

Step-by-Step Solution

Identify the key requirement described in the scenario

The requirement is to smooth traffic bursts by holding extra packets in memory (buffering) for later transmission instead of dropping them.

Distinguishing between buffering excess packets versus dropping them is the fundamental operational difference between traffic shaping and traffic policing.

Select the appropriate QoS tool that implements packet buffering for rate control

Traffic shaping uses queues to buffer bursty traffic, smoothing the output rate profile to match the configured bandwidth ceiling.

Traffic shaping prevents packet drops during transient spikes at the cost of minor queuing latency.

Key Concept

Traffic Shaping vs. Traffic Policing Mechanics

Question 19Question →

Match each Quality of Service (QoS) concept on the left with its corresponding operational description on the right.

Click a left item, then click its matching right item

Show answer & explanation

Answer

Expedited Forwarding (EF) matches with the description for low latency voice traffic using DSCP 46. Class-Based Weighted Fair Queuing (CBWFQ) matches with minimum bandwidth guarantees per class without a strict priority queue. Low Latency Queuing (LLQ) matches with bandwidth guarantees combined with a strict priority queue. Trust Boundary matches with the network location where QoS markings are validated or re-marked.

Each QoS term correctly aligns with its architectural definition: EF delivers low-latency PHB (DSCP 46); CBWFQ guarantees bandwidth allocations per class; LLQ incorporates a strict priority queue alongside CBWFQ; and the Trust Boundary dictates where packet QoS fields are evaluated and trusted.

Step-by-Step Solution

Identify the primary function of Expedited Forwarding (EF).

EF uses DSCP 46 (101110) to deliver a low-loss, low-latency, low-jitter service ideal for voice.

Understanding PHB standards is fundamental for matching traffic types to QoS markings.

Differentiate between CBWFQ and LLQ queuing algorithms.

CBWFQ provides class-based bandwidth guarantees. LLQ builds on CBWFQ by adding a strict priority queue to service real-time traffic first.

Real-time voice traffic requires a strict priority queue provided by LLQ to minimize jitter.

Determine the role of a Trust Boundary in enterprise QoS deployments.

It defines the device or port threshold where packet markings are either accepted as trusted or re-marked to default values.

Enforcing trust boundaries prevents end-user devices from inappropriately elevating their traffic priority.

Key Concept

QoS Per-Hop Behaviors, Queuing Mechanisms (CBWFQ vs LLQ), and Trust Boundary Architecture

Question 20Question →

A network operations team is troubleshooting performance discrepancies across a Cisco enterprise switch interface connected to a media server. An ingress policy map containing a traffic policing engine is configured on the switch interface to enforce rate limits. During bursts of high bandwidth utilization, real-time video traffic exceeding the configured rate limit is dropped directly at the ingress interface. Conversely, a WAN edge router interface configured with traffic shaping handles similar bandwidth bursts above the rate limit without packet loss, introducing only minor queueing latency. Which operational difference between QoS mechanisms explains this outcome?

Traffic policing meters traffic and immediately drops or remarks packets exceeding the rate limit without buffering, whereas traffic shaping meters traffic and buffers excess packets in memory to smooth out bursts.

Traffic policing buffers non-conforming packets into an internal queue until interface bandwidth becomes available, whereas traffic shaping drops all excess packets unconditionally.

Traffic policing modifies TCP window sizes to dynamically throttle host transmission speeds, whereas traffic shaping relies on Random Early Detection (RED) to drop packets randomly before buffers fill up.

Traffic policing re-marks Layer 2 Class of Service (CoS) bits to DSCP 0 and queues them in Low Latency Queuing (LLQ), whereas traffic shaping drops untagged Ethernet frames.

Show answer & explanation

Answer: Traffic policing meters traffic and immediately drops or remarks packets exceeding the rate limit without buffering, whereas traffic shaping meters traffic and buffers excess packets in memory to smooth out bursts.

Answer

The correct answer identifies the fundamental difference between policing and shaping: Traffic policing meters traffic against a token bucket and immediately drops or remarks out-of-profile traffic without storing it in memory. In contrast, traffic shaping retains excess packets in a buffer memory queue and releases them smoothed over time, causing latency rather than immediate packet drops.

Step-by-Step Solution

Analyze the operational mechanics of Traffic Policing

Policing measures incoming or outgoing traffic rate against a configured Committed Information Rate (CIR). When traffic exceeds CIR, excess packets are immediately dropped or remarked. Policing does NOT use a queue/buffer.

Policing is designed for hard rate-limiting at ingress or egress interfaces without adding latency/jitter.

Analyze the operational mechanics of Traffic Shaping

Shaping measures traffic against a target CIR and holds non-conforming (excess) traffic in a queue/buffer, transmitting it later as bandwidth becomes available.

Shaping is designed for egress interfaces to smooth out traffic micro-bursts and prevent downstream policing drops, at the cost of queueing delay.

Compare the observed scenario against QoS mechanics

The ingress switch policy dropped packets because policing has no buffer. The egress WAN interface delayed packets without dropping them because shaping buffered the excess burst.

The difference in packet loss vs latency directly reflects the presence of a shaping buffer versus the bufferless action of a policer.

Key Concept

QoS Traffic Policing vs. Traffic Shaping Operational Mechanics

Estimated Time:2m 0s

Page 1 / 2Next

QoS Per-Hop Behaviors, Classification, Marking, Queuing, and Traffic Shaping/Policing

Answer

Step-by-Step Solution

Key Concept

Common Mistakes

Answer

Step-by-Step Solution

Key Concept

Common Mistakes

Answer

Step-by-Step Solution

Key Concept

Common Mistakes

Answer

Step-by-Step Solution

Key Concept

Common Mistakes

Answer

Step-by-Step Solution

Key Concept

Common Mistakes

Answer

Step-by-Step Solution

Key Concept

Common Mistakes

Answer

Step-by-Step Solution

Key Concept

Common Mistakes

Answer

Step-by-Step Solution

Key Concept

Common Mistakes

Answer

Step-by-Step Solution

Key Concept

Common Mistakes

Answer

Step-by-Step Solution

Key Concept

Common Mistakes

Answer

Step-by-Step Solution

Key Concept

Common Mistakes

Answer

Step-by-Step Solution

Key Concept

Common Mistakes

Answer

Step-by-Step Solution

Key Concept

Common Mistakes

Answer

Step-by-Step Solution

Key Concept

Common Mistakes

Answer

Step-by-Step Solution

Key Concept

Common Mistakes

Answer

Step-by-Step Solution

Key Concept

Common Mistakes

Answer

Step-by-Step Solution

Key Concept

Common Mistakes

Answer

Step-by-Step Solution

Key Concept

Common Mistakes

Answer

Step-by-Step Solution

Key Concept

Common Mistakes

Answer

Step-by-Step Solution

Key Concept