CCNP Architecture Practice Question
A network engineer is configuring a new Cisco Catalyst switch for a small branch office. The engineer needs to ensure that the switch can be managed remotely via SSH and that only encrypted management traffic is allowed. The management VLAN is VLAN 10, and the switch's management IP address will be 10.10.10.2/24. Which command must be entered to assign the management IP address to the switch?
⚠ Common exam trap
Candidates often confuse the method for assigning management IPs on switches (SVI) with routers (physical interface), or thinking a default gateway command assigns an IP.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
interface vlan 10 -> ip address 10.10.10.2 255.255.255.0
On Cisco switches, management IP addresses are assigned to a switched virtual interface (SVI) representing the management VLAN. The correct command sequence is to enter interface configuration mode for the management VLAN and assign the IP address and subnet mask. This allows the switch to be managed via SSH on that VLAN. The other options either assign an IP to a physical interface (not typical for switches), set a default gateway without an IP, or use an invalid command.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
ip default-gateway 10.10.10.2
Why it's wrong here
The ip default-gateway command sets the default gateway for the switch's management traffic, but it does not assign an IP address. It is used after an IP address is configured on an SVI. Without an IP address, the switch cannot be managed remotely. Therefore, this command alone does not satisfy the requirement of assigning the management IP address to the switch.
- ✗
management ip address 10.10.10.2 255.255.255.0
Why it's wrong here
There is no global configuration command 'management ip address' on Cisco IOS switches. The correct method is to configure an SVI. This command is invalid and would not be accepted by the switch. Thus, it is incorrect for assigning a management IP address in this scenario.
- ✗
interface gigabitethernet0/1 -> ip address 10.10.10.2 255.255.255.0
Why it's wrong here
Assigning an IP address directly to a physical interface on a switch is not supported for management purposes on most Cisco Catalyst switches; physical switch ports are Layer 2 by default and cannot have IP addresses unless configured as routed ports (which requires specific models and commands like no switchport). This would not provide management access on VLAN 10 and is not the correct approach for this scenario.
- ✓
interface vlan 10 -> ip address 10.10.10.2 255.255.255.0
Why this is correct
To assign an IP address for management on a Cisco switch, you create an SVI for the management VLAN and assign the IP address under that interface. This is the correct method because it allows the switch to be reachable on VLAN 10. The command sequence is entered in global configuration mode: interface vlan 10, then ip address 10.10.10.2 255.255.255.0. This enables SSH management when combined with proper default gateway and SSH configuration.
Visual reference
About these practice questions
This 350-401 question is part of Courseiva's 1,923-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Cisco exam blueprint
This 350-401 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-401 exam.