The answer is that the match-any keyword applies a logical OR operation, meaning a packet needs to match only one of the specified DSCP values to be classified into that class. In the VIDEO class-map, a packet matching either DSCP AF41 or AF42 is classified as VIDEO, while the VOICE class-map requires only a single EF match. This classification logic is fundamental to Cisco QoS policy maps and is frequently tested on the ENCOR 350-401 exam, often as a trick where candidates confuse match-any with the default match-all behavior, which requires all conditions to be met. A common trap is assuming multiple match statements in a class-map default to OR logic, but without the match-any keyword, the class-map implicitly uses match-all. To remember, think of "any" as "any one will do," contrasting with "all" meaning "every condition must be satisfied."
CCNP QoS Architecture Practice Question
This 350-401 practice question tests your understanding of qos architecture. This is a configuration task: choose the command set that satisfies every stated requirement. Small differences — like 'secret' vs 'password' or 'transport input ssh' vs 'all' — change whether the answer is correct. After answering, compare your reasoning against the explanation and wrong-answer breakdown below. Once you have made your selection, read the full explanation to reinforce the concept and understand why each distractor is designed to mislead on exam day.
Consider the following configuration:
class-map match-any VOICE
match ip dscp ef
class-map match-any VIDEO
match ip dscp af41
match ip dscp af42
What is the effect of the match-any keyword in these class-maps?
A packet must match all specified DSCP values to be classified into the class.
Why wrong: That would be match-all, not match-any.
B
A packet matching either DSCP EF or AF41 will be classified into both classes.
Why wrong: Classification is per class; a packet can match multiple classes, but the order of classes in the policy-map determines which class is used first.
C
A packet matching any one of the specified DSCP values is classified into that class.
match-any means logical OR of the match conditions.
D
The match-any keyword is invalid for DSCP matching; only match-all is supported.
Why wrong: Both match-any and match-all are valid for DSCP matching.
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
A packet matching any one of the specified DSCP values is classified into that class.
The `match-any` keyword in a Cisco class-map means that a packet needs to match only one of the listed match criteria to be classified into that class. In the VIDEO class-map, a packet matching either DSCP AF41 or AF42 will be classified as VIDEO. This is the default behavior for class-maps when no keyword is specified, but explicitly using `match-any` reinforces that logical OR operation is applied.
Key principle: Answer the scenario, not the keyword: identify the specific constraint before choosing the most familiar-sounding option.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
✗
A packet must match all specified DSCP values to be classified into the class.
Why it's wrong here
That would be match-all, not match-any.
✗
A packet matching either DSCP EF or AF41 will be classified into both classes.
Why it's wrong here
Classification is per class; a packet can match multiple classes, but the order of classes in the policy-map determines which class is used first.
✓
A packet matching any one of the specified DSCP values is classified into that class.
Why this is correct
match-any means logical OR of the match conditions.
Related concept
Read the scenario before looking for a memorised answer.
✗
The match-any keyword is invalid for DSCP matching; only match-all is supported.
Why it's wrong here
Both match-any and match-all are valid for DSCP matching.
Common exam traps
Common exam trap: answer the scenario, not the keyword
Cisco often tests the confusion between `match-any` (logical OR) and `match-all` (logical AND), expecting candidates to mistakenly think that `match-any` requires all conditions or that it causes a packet to be placed into multiple classes simultaneously.
Detailed technical explanation
How to think about this question
Under the hood, Cisco IOS uses a ternary content-addressable memory (TCAM) to implement QoS classification. The `match-any` keyword programs the TCAM to perform a logical OR across the match entries, allowing a single lookup to determine if any condition is met. In real-world deployments, this is critical for voice and video traffic where multiple DSCP values (e.g., EF for voice, AF41/AF42 for video) must be treated differently, and using `match-any` ensures that a packet with a single DSCP value is correctly placed into its intended class without requiring all values to be present.
KKey Concepts to Remember
Read the scenario before looking for a memorised answer.
Find the constraint that changes the correct option.
Eliminate answers that are true in general but not in this case.
TExam Day Tips
→Watch for words such as best, first, most likely and least administrative effort.
→Review why wrong options are wrong, not only why the correct option is correct.
Key takeaway
Answer the scenario, not the keyword: identify the specific constraint before choosing the most familiar-sounding option.
Real-world example
How this comes up in practice
A practitioner preparing for the 350-401 exam encounters this exact type of scenario on the job. The correct answer here is not the most general option — it is the best answer for the specific constraint described. Answer the scenario, not the keyword: identify the specific constraint before choosing the most familiar-sounding option. Real exam questions reward reading the full scenario before eliminating options, because the constraint defines which answer fits.
What to study next
Got this wrong? Here's your next step.
Identify which exam domain this question belongs to, review the core concept, then practise similar questions from the same domain.
QoS Architecture — This question tests QoS Architecture — Read the scenario before looking for a memorised answer..
What is the correct answer to this question?
The correct answer is: A packet matching any one of the specified DSCP values is classified into that class. — The `match-any` keyword in a Cisco class-map means that a packet needs to match only one of the listed match criteria to be classified into that class. In the VIDEO class-map, a packet matching either DSCP AF41 or AF42 will be classified as VIDEO. This is the default behavior for class-maps when no keyword is specified, but explicitly using `match-any` reinforces that logical OR operation is applied.
What should I do if I get this 350-401 question wrong?
Identify which exam domain this question belongs to, review the core concept, then practise similar questions from the same domain.
What is the key concept behind this question?
Read the scenario before looking for a memorised answer.
About these practice questions
Courseiva creates original exam-style practice questions with explanations and wrong-answer analysis. It does not publish real exam questions, exam dumps, or protected exam content. Learn why practice questions differ from exam dumps →
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
This 350-401 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-401 exam.
Question Discussion
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
Sign in to join the discussion.