CCNP Virtualization Practice Question
A network engineer is deploying VXLAN EVPN on a Cisco Nexus 9000 switch. Which two statements about the configuration of the NVE interface are true? (Choose two.)
⚠ Common exam trap
The trap here is assuming that the NVE interface is a physical interface or that it requires an IP address directly, when in fact it is a logical interface that relies on a separate source interface.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The NVE interface must be configured with a source interface that is reachable via the underlay network.
The two true statements are that the NVE interface must have a source interface reachable via the underlay network, and each VNI must be associated with the NVE interface using the member vni command. These are essential for VXLAN operation. The source interface provides the VTEP IP, and the VNI association enables VXLAN encapsulation for specific VNIs.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The NVE interface is a physical interface that connects to the underlay network.
Why it's wrong here
The NVE interface is a logical interface, not a physical one. It represents the VXLAN tunnel endpoint and is configured as an interface nve 1. It does not connect directly to the underlay; instead, it uses the underlying physical interfaces and routing to reach remote VTEPs.
- ✗
The NVE interface requires an IP address to be configured directly on it.
Why it's wrong here
The NVE interface does not require an IP address to be configured directly on it. Instead, it uses the IP address of the source interface (usually a loopback) as the VTEP address. Configuring an IP address on the NVE interface is not valid and would not function as the VTEP address.
- ✗
The NVE interface can be configured with multiple source interfaces for redundancy.
Why it's wrong here
The NVE interface supports only one source interface. While you can have multiple loopback interfaces, only one can be designated as the source for the NVE. This ensures a single VTEP IP address, which is necessary for consistent VXLAN tunnel establishment. Multiple source interfaces would cause conflicting VTEP addresses.
- ✓
The NVE interface must be configured with a source interface that is reachable via the underlay network.
Why this is correct
The source interface for the NVE interface must be reachable via the underlay network so that VXLAN tunnels can be established. Typically, a loopback interface is used, and its IP address must be advertised into the underlay routing protocol. Without reachability, VXLAN traffic cannot be encapsulated and forwarded to remote VTEPs.
- ✓
Each VNI must be associated with the NVE interface using the member vni command.
Why this is correct
Each VNI that is used for VXLAN must be associated with the NVE interface using the member vni command. This association is required to map VLANs to VNIs and to enable the NVE interface to handle traffic for that VNI. Without this, VXLAN encapsulation and decapsulation for that VNI will not occur.
About these practice questions
Courseiva writes every 350-401 question from scratch — 1,923 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Cisco exam blueprint
This 350-401 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-401 exam.