mediumMultiple Choice
CCNP Practice Question: Consider this configuration: interface…
Consider this configuration:
interface GigabitEthernet0/2 switchport mode trunk switchport trunk native vlan 10 switchport trunk allowed vlan 10,20,30
!
interface Vlan10 ip address 192.168.10.1 255.255.255.0
Which statement is true about this configuration?
⚠ Common exam trap
Cisco often tests the misconception that the native VLAN cannot be used for routing or that it must be excluded from the allowed VLAN list, but in reality, the native VLAN is simply the VLAN that carries untagged frames and can be included in the allowed list and have an SVI.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The trunk will only allow VLANs 10, 20, and 30, and VLAN 10 is the native VLAN.
The configuration explicitly permits VLANs 10, 20, and 30 on the trunk using the 'switchport trunk allowed vlan' command, and VLAN 10 is set as the native VLAN with the 'switchport trunk native vlan 10' command. The native VLAN carries untagged traffic on the trunk, but it is still a valid VLAN that can be included in the allowed list and can have an SVI for routing. The SVI for VLAN 10 will come up as long as the VLAN exists and there is at least one active switchport in that VLAN, which is satisfied by the trunk port.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The native VLAN 10 cannot be used as a routed interface because it is the native VLAN.
Why it's wrong here
The native VLAN designation only controls which VLAN is transmitted untagged on a trunk port; it does not restrict Layer 3 functionality. You can create an SVI for the native VLAN and use it as a routed interface just like any other VLAN. The only caveat is that native VLAN frames are untagged, but that does not affect the SVI's ability to route traffic.
- ✓
The trunk will only allow VLANs 10, 20, and 30, and VLAN 10 is the native VLAN.
Why this is correct
The command 'switchport trunk allowed vlan 10,20,30' explicitly limits the VLANs permitted on the trunk to 10, 20, and 30, effectively pruning all other VLANs from that trunk link. Additionally, 'switchport trunk native vlan 10' assigns VLAN 10 as the native VLAN, meaning frames in VLAN 10 are sent untagged across the trunk. This is a valid configuration that restricts traffic to those VLANs while making VLAN 10 the untagged native VLAN.
- ✗
The SVI for VLAN 10 will not come up because the native VLAN must be untagged.
Why it's wrong here
An SVI comes up when the corresponding VLAN exists in the switch's VLAN database and at least one port in that VLAN is in the up/up state; being the native VLAN on a trunk does not affect this. The native VLAN is simply the VLAN that carries untagged frames on a trunk, but it still has a full Layer 2 presence and can have an SVI. Therefore, the statement that the SVI will not come up because the native VLAN must be untagged is incorrect.
- ✗
The configuration is invalid because the native VLAN must be the same as the management VLAN.
Why it's wrong here
The native VLAN and the management VLAN are independent concepts: the native VLAN is a trunk-port property that determines which VLAN's frames are sent untagged, while the management VLAN is used for remote management access such as SSH or SNMP. There is no requirement that they be the same, and they are often different in enterprise designs. This configuration is perfectly valid even if the native VLAN is not the management VLAN.
Visual reference
About these practice questions
This 350-401 question is part of Courseiva's 1,923-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 350-401 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-401 exam.