Courseiva
Virtualization →hardMultiple Choice

CCNP Virtualization Practice Question

A network engineer is troubleshooting a Cisco Nexus 9000 switch configured for VXLAN EVPN. The engineer notices that the switch is not learning remote MAC addresses from other VTEPs. The underlay routing is working, and MP-BGP EVPN peering is established. Which configuration issue could prevent the switch from learning remote MAC addresses?

⚠ Common exam trap

The trap here is focusing on underlay or BGP peering issues when the problem is actually a local mapping mismatch between the VNI and VLAN, which is a common EVPN configuration oversight.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

The VNI is not mapped to the correct VLAN in the EVPN configuration.

In VXLAN EVPN, the VNI must be mapped to the correct VLAN for the switch to associate EVPN routes with local VLANs and learn remote MAC addresses. If the mapping is missing or incorrect, the switch cannot install remote MACs into the MAC address table, even if EVPN peering is up and the underlay is functional.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • ✗

    The BGP router ID is not unique.

    Why it's wrong here

    A non-unique BGP router ID can cause peering issues, but the scenario states that MP-BGP EVPN peering is established. Therefore, the router ID is not preventing peering. Even if it were, the symptom would be peering failure, not specifically a failure to learn remote MAC addresses.

  • ✓

    The VNI is not mapped to the correct VLAN in the EVPN configuration.

    Why this is correct

    For VXLAN EVPN to learn remote MAC addresses, the VNI must be mapped to the correct VLAN. If the mapping is missing or incorrect, the switch cannot associate incoming EVPN routes with the local VLAN, preventing MAC learning. This is a common misconfiguration that breaks overlay connectivity.

  • ✗

    The underlay OSPF cost is too high.

    Why it's wrong here

    The underlay OSPF cost affects path selection but does not prevent MAC learning. As long as the underlay provides reachability to remote VTEPs, EVPN routes can be exchanged. High OSPF cost might cause suboptimal routing but not a complete failure to learn remote MAC addresses.

  • ✗

    The switch is configured with a static VXLAN tunnel instead of a dynamic one.

    Why it's wrong here

    Static VXLAN tunnels do not use EVPN for MAC learning; they require manual configuration of remote VTEPs. However, the scenario indicates MP-BGP EVPN peering is established, implying a dynamic setup. A static tunnel would not be used in this context, so this is not the likely issue.

Visual reference

Switch VLAN 10 Sales (192.168.10.0/24) PC-A PC-B VLAN 20 HR (192.168.20.0/24) PC-C PC-D Router VLANs isolate traffic — inter-VLAN routing requires a Layer 3 device

Quick reference

Access Control Model Comparison

ModelAcronymWho Controls Access?Best For
Discretionary Access ControlDACResource ownerSmall teams, file shares
Mandatory Access ControlMACSystem / security labelsClassified govt / military
Role-Based Access ControlRBACAdministrator (via roles)Enterprise environments
Attribute-Based Access ControlABACPolicy engine (user + resource attributes)Fine-grained, dynamic policies
Rule-Based Access ControlRuBACSystem rules / ACLsFirewall rules, network ACLs

About these practice questions

This 350-401 question is part of Courseiva's 1,923-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written and reviewed by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

Last reviewed September 2026 · checked against the official Cisco exam blueprint

This 350-401 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-401 exam.