easyMultiple Choice
CCNP Practice Question: Runs the following command on Switch SW3: SW3#…
A network engineer runs the following command on Switch SW3:
SW3# show etherchannel load-balance
EtherChannel Load-Balancing Configuration: src-dst-ip
EtherChannel Load-Balancing Operational State: src-dst-ip
Based on this output, what can be concluded?
⚠ Common exam trap
Cisco often tests the distinction between MAC-based and IP-based load balancing, and candidates may confuse 'src-dst-ip' with 'src-dst-mac' or incorrectly assume that the operational state must always match the configured state (which is true here, but the trap is that some candidates think a mismatch is normal).
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The load-balancing method is based on source and destination IP addresses.
The command output shows both the configured and operational load-balancing method as 'src-dst-ip', which means the switch uses a hash of both the source and destination IP addresses to select the EtherChannel link. This is the correct interpretation because 'src-dst-ip' explicitly indicates IP-based load balancing, not MAC-based or round-robin.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The switch uses source MAC and destination MAC for load balancing.
Why it's wrong here
The output explicitly states 'src-dst-ip' as the load-balancing algorithm, so the switch is not using source and destination MAC addresses. MAC-based hashing would be identified as 'src-dst-mac' in the EtherChannel configuration. Because the displayed method references Layer 3 addresses, any answer claiming MAC-based distribution contradicts the evidence shown in the command output.
- ✓
The load-balancing method is based on source and destination IP addresses.
Why this is correct
The load-balancing method is 'src-dst-ip', meaning the switch hashes the source IP and destination IP fields to select a member link. This ensures that packets belonging to the same IP flow always traverse the same port, preserving packet ordering while distributing different flows across the bundle. This is a Layer 3 hash, commonly used for routed or L3-switched EtherChannels.
- ✗
The operational state differs from the configured state, indicating a problem.
Why it's wrong here
If the operational state did not match the configured state, EtherChannel would likely report an error or the bundle would fail to come up. In the provided output, the operational and configured states are consistent, so there is no mismatch or problem. This option is incorrect because it asserts a discrepancy that is not present, and it also misidentifies the core focus of the output, which is load balancing.
- ✗
The switch is using round-robin to distribute traffic across ports.
Why it's wrong here
EtherChannel does not use round-robin distribution because that would send each packet to the next link regardless of flow, potentially causing out-of-order delivery. Instead, a deterministic hash is applied to fields like IP addresses or MAC addresses, mapping each flow to a single link. Since the output confirms a hash-based 'src-dst-ip' method, round-robin is neither standard nor the mechanism in use.
Quick reference
Access Control Model Comparison
| Model | Acronym | Who Controls Access? | Best For |
|---|---|---|---|
| Discretionary Access Control | DAC | Resource owner | Small teams, file shares |
| Mandatory Access Control | MAC | System / security labels | Classified govt / military |
| Role-Based Access Control | RBAC | Administrator (via roles) | Enterprise environments |
| Attribute-Based Access Control | ABAC | Policy engine (user + resource attributes) | Fine-grained, dynamic policies |
| Rule-Based Access Control | RuBAC | System rules / ACLs | Firewall rules, network ACLs |
About these practice questions
One of 1,923 original 350-401 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 350-401 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-401 exam.