CCNP Architecture Practice Question
A network administrator is configuring a new Cisco Catalyst switch and needs to ensure that the management VLAN interface is reachable from a remote subnet. The switch is at its default configuration. Which command must be applied to the management VLAN interface to allow remote management from a different subnet?
⚠ Common exam trap
A common mix-up: candidates confuse the default gateway command for Layer 2 switches with the default route command used on Layer 3 devices, which leads to incorrect configuration on a switch.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
ip default-gateway 10.1.1.1
On a Layer 2 switch, the management VLAN interface requires a default gateway to communicate with devices on other subnets. The 'ip default-gateway' command specifies that gateway, allowing the switch to be managed remotely from a different subnet without enabling full IP routing.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
ip name-server 10.1.1.1
Why it's wrong here
The 'ip name-server' command configures a DNS server for name resolution, which is unrelated to reachability for management traffic. It does not provide a default gateway or routing capability, so it would not enable remote management from a different subnet.
- ✗
ip route 0.0.0.0 0.0.0.0 10.1.1.1
Why it's wrong here
The 'ip route' command is used on a Layer 3 device that performs routing, such as a router or a multilayer switch with IP routing enabled. On a default Layer 2 switch, IP routing is disabled, so this command would not be effective for management traffic. The correct command for a Layer 2 switch is 'ip default-gateway'.
- ✗
ip routing
Why it's wrong here
The 'ip routing' command enables IP routing on a multilayer switch, allowing it to route between VLANs. However, this is not necessary solely for management access from a remote subnet; a default gateway is sufficient. Enabling IP routing would change the switch's operation and is not the minimal configuration required.
- ✓
ip default-gateway 10.1.1.1
Why this is correct
The 'ip default-gateway' command is used on a Layer 2 switch to specify a default gateway for management traffic when the switch is not running a routing protocol. This allows the management VLAN interface to communicate with remote subnets, enabling remote management from a different subnet.
Visual reference
About these practice questions
One of 1,923 original 350-401 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Cisco exam blueprint
This 350-401 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-401 exam.