CCNP Virtualization Practice Question
A network engineer is deploying a VXLAN EVPN fabric on Cisco Nexus 9000 switches. The design requires that all VTEPs in the fabric learn the IP addresses of remote VTEPs so that BUM traffic can be replicated using ingress replication. Which control-plane component is responsible for distributing this VTEP IP address information across the fabric?
⚠ Common exam trap
The trap here is assuming that any EVPN route type distributing reachability information also distributes VTEP addresses for replication, when only the Inclusive Multicast Ethernet Tag route does that job.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The EVPN Type-3 route carrying the VTEP loopback address and VNI membership
Ingress replication requires each VTEP to know the loopback IP address of every other VTEP participating in the same VNI. EVPN Type-3 Inclusive Multicast Ethernet Tag routes serve precisely this purpose, advertising the originating VTEP IP, VNI, and Ethernet tag. Type-2 handles host MAC/IP bindings, Type-5 handles IP prefix advertisement, and PIM belongs to multicast replication designs.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
The EVPN Type-3 route carrying the VTEP loopback address and VNI membership
Why this is correct
EVPN Type-3 (Inclusive Multicast Ethernet Tag) routes advertise the originating VTEP's loopback IP address along with the VNI and Ethernet tag information. Receiving VTEPs build an ingress replication list from these advertisements, allowing them to replicate broadcast, unknown-unicast, and multicast traffic to every remote VTEP in the same VNI. This is exactly the control-plane mechanism the design requires.
- ✗
The PIM Anycast-RP configuration on the spine switches
Why it's wrong here
PIM Anycast-RP is used when a VXLAN EVPN fabric is configured for multicast-based BUM replication rather than ingress replication. The scenario explicitly states ingress replication is used, which relies on the EVPN control plane instead of PIM. PIM would be relevant only in a multicast replication design, so it does not satisfy the stated requirement.
- ✗
The EVPN Type-5 route carrying IP prefix reachability for the tenant VRF
Why it's wrong here
EVPN Type-5 (IP Prefix) routes advertise IP prefix reachability for tenant VRFs, enabling inter-subnet routing across the fabric for a Layer 3 VNI. They do not distribute VTEP loopback addresses for BUM replication. While Type-5 routes are essential for routed traffic between subnets, the requirement described here concerns the replication list used for flooded traffic, not prefix reachability.
- ✗
The EVPN Type-2 route carrying MAC and IP address bindings for host endpoints
Why it's wrong here
EVPN Type-2 routes advertise MAC/IP address bindings for individual host endpoints (MAC-VRF entries) so remote leaf switches can program host reachability. They do not carry the VTEP loopback addresses used for BUM replication. In this scenario, the engineer needs the VTEP IP addresses of all fabric nodes, which is a different function served by a different EVPN route type.
Quick reference
Access Control Model Comparison
| Model | Acronym | Who Controls Access? | Best For |
|---|---|---|---|
| Discretionary Access Control | DAC | Resource owner | Small teams, file shares |
| Mandatory Access Control | MAC | System / security labels | Classified govt / military |
| Role-Based Access Control | RBAC | Administrator (via roles) | Enterprise environments |
| Attribute-Based Access Control | ABAC | Policy engine (user + resource attributes) | Fine-grained, dynamic policies |
| Rule-Based Access Control | RuBAC | System rules / ACLs | Firewall rules, network ACLs |
About these practice questions
This 350-401 question is part of Courseiva's 1,923-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Cisco exam blueprint
This 350-401 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-401 exam.