CCNP Infrastructure Practice Question
A network engineer is implementing VRF-Lite on a Cisco IOS router to separate traffic from two different departments. The router has two interfaces, GigabitEthernet0/0 and GigabitEthernet0/1, each assigned to a different VRF. The engineer wants to verify that the VRFs are properly configured and that routes are being populated. Which command displays the routing table for a specific VRF?
⚠ Common exam trap
The trap here is using show ip route without the vrf keyword, which only shows the global routing table and misses VRF-specific routes.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
show ip route vrf DEPARTMENT1
To view the routing table for a specific VRF, the show ip route vrf command must be used. The global show ip route only displays the global table. Commands like show vrf interface and show ip vrf provide VRF configuration information but not the routes themselves. Verifying VRF routes is critical in VRF-Lite deployments to ensure proper traffic separation.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
show ip vrf
Why it's wrong here
This command lists all configured VRFs and their associated interfaces, but it does not show the routing table for a specific VRF. It provides a summary of VRF configuration, not the routes. To see routes, you must use the show ip route vrf command.
- ✗
show vrf interface
Why it's wrong here
This command displays the VRF assignment for interfaces, showing which interfaces belong to which VRF. It does not display the routing table for a VRF. While useful for verifying interface assignments, it does not satisfy the requirement to view routes within a VRF.
- ✗
show ip route
Why it's wrong here
This command displays the global IP routing table only. It does not show routes that are installed in any VRF. In a VRF-Lite setup, routes are kept separate, so this command would not provide the information needed to verify VRF-specific routes. It is insufficient for the task.
- ✓
show ip route vrf DEPARTMENT1
Why this is correct
This command displays the IP routing table for the VRF named DEPARTMENT1. It is the correct way to verify routes within a specific VRF. Without specifying the VRF, the global routing table is shown, which does not include VRF routes. This command is essential for troubleshooting VRF-Lite configurations.
About these practice questions
Courseiva writes every 350-401 question from scratch — 1,923 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Cisco exam blueprint
This 350-401 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-401 exam.