CCNP Infrastructure Practice Question
A network engineer is deploying a new branch office with a single Cisco Catalyst 9300 switch. The branch has three VLANs: VLAN 10 (users), VLAN 20 (voice), and VLAN 30 (management). The engineer needs to route traffic between these VLANs directly on the switch without using an external router. Which feature should be configured on the switch to enable inter-VLAN routing?
⚠ Common exam trap
The trap here is assuming that a routed port can belong to multiple VLANs or that Router-on-a-Stick is required for inter-VLAN routing on a multilayer switch.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Configure Switch Virtual Interfaces (SVIs) for each VLAN and enable IP routing.
Inter-VLAN routing on a multilayer switch is achieved by creating a Switch Virtual Interface (SVI) for each VLAN and enabling IP routing. SVIs act as default gateways for hosts in each VLAN, and the switch routes packets between them. This method is efficient, scalable, and does not require an external router, making it ideal for the branch office scenario.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Configure 802.1Q trunking to an external router and enable Router-on-a-Stick.
Why it's wrong here
Router-on-a-Stick uses an external router with a trunk link to route between VLANs. The scenario specifies routing directly on the switch without an external router, so this method contradicts the requirement. Although it works, it adds cost and complexity and is not the intended solution for a single multilayer switch.
- ✗
Configure a routed port on the switch and connect it to each VLAN's subnet.
Why it's wrong here
A routed port is a physical interface that acts as a Layer 3 port, but it cannot be associated with multiple VLANs. To route between VLANs, you would need multiple routed ports, one per VLAN, which is not feasible on a single switch without additional hardware. This approach does not provide internal inter-VLAN routing.
- ✗
Enable private VLANs to isolate traffic between VLANs.
Why it's wrong here
Private VLANs are used to restrict Layer 2 connectivity within a VLAN, not to route between different VLANs. They provide isolation between ports in the same subnet. Enabling private VLANs would prevent communication rather than enable inter-VLAN routing, which is the opposite of the requirement.
- ✓
Configure Switch Virtual Interfaces (SVIs) for each VLAN and enable IP routing.
Why this is correct
SVIs are logical Layer 3 interfaces associated with VLANs. Creating an SVI for each VLAN and enabling IP routing allows the multilayer switch to route traffic between VLANs internally. This is the standard method for inter-VLAN routing on a Catalyst switch, eliminating the need for an external router and providing high-performance routing.
Visual reference
About these practice questions
Courseiva writes every 350-401 question from scratch — 1,923 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Cisco exam blueprint
This 350-401 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-401 exam.