This read-create object specifies what happens to traffic that exceeds this policer's committed rate and burst, its out-of-profile action, such as dropping or remarking the excess traffic. An admin decides here whether over-limit traffic should simply be dropped or instead be remarked, for example to a lower-priority DSCP or drop-precedence value, and allowed through, shaping how aggressively the rate limit is enforced. For example, an admin who wants excess guest traffic merely deprioritized rather than dropped outright would set this action to remark the out-of-profile packets rather than discard them.