Hierarchical priority queuing is used on the interfaces on which you enable a traffic-shaping queue. Which two statements about hierarchical priority queuing are true? (Choose two.)
A. Priority packets are never dropped from the shape queue unless the sustained rate of priority traffic exceeds the shape rate.
B. For IPsec-encrypted packets, you can match traffic based only on the DSCP or precedence setting.
C. IPsec over TCP is not supported for priority traffic classification.
D. For IPsec-encrypted packets, you cannot match traffic based on the DSCP or precedence setting.
E. IPsec over TCP is supported for priority traffic classification.
AB for sure
ABC
https://www.cisco.com/c/en/us/td/docs/security/asa/asa92/configuration/firewall/asa-firewall-cli/conns-qos.html#34423
See the following guidelines about hierarchical priority queuing:
– Priority packets are always queued at the head of the shape queue so they are always transmitted ahead of other non-priority queued packets.
– Priority packets are never dropped from the shape queue unless the sustained rate of priority traffic exceeds the shape rate.
– For IPsec-encrypted packets, you can only match traffic based on the DSCP or precedence setting.
– IPsec-over-TCP is not supported for priority traffic classification.