hardMultiple Choice
CCNP Practice Question: Runs the following command on Switch SW1: SW1#…
A network engineer runs the following command on Switch SW1:
SW1# show vlan id 10 VLAN ID: 10 VLAN Name: Sales VLAN Type: Ethernet VLAN State: active
MTU: 1500
Remote SPAN VLAN: No
Primary VLAN ID: 10
Private VLAN Type: Primary
Associated Secondary VLAN IDs: 100, 200
Based on this output, what can be concluded?
⚠ Common exam trap
Cisco often tests the distinction between the 'show vlan' output for a primary VLAN versus a secondary VLAN, and the trap here is that candidates mistakenly think the presence of 'Associated Secondary VLAN IDs' means the VLAN itself is a secondary VLAN, when in fact only the primary VLAN lists its associated secondary VLANs.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
VLAN 10 is a primary private VLAN.
The output shows VLAN 10 configured as a Primary VLAN with associated secondary VLANs 100 and 200, which is the defining characteristic of a primary private VLAN. This is confirmed by the fields 'Private VLAN Type: Primary' and 'Associated Secondary VLAN IDs: 100, 200'. Therefore, VLAN 10 is a primary private VLAN, not a normal data VLAN.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
VLAN 10 is a community VLAN.
Why it's wrong here
VLAN 10 cannot be a community VLAN because the output explicitly marks its Private VLAN Type as 'Primary' rather than 'Community.' In Cisco private VLAN terminology, a community VLAN is a secondary VLAN that allows hosts within the same community to communicate directly while still being isolated from other communities, and it is always associated with a primary VLAN. Since VLAN 10 is the primary itself, it is the parent VLAN that community and isolated secondary VLANs hang off of, not a community VLAN.
- ✗
VLAN 10 is an isolated VLAN.
Why it's wrong here
An isolated VLAN is also a secondary private VLAN type, but the output shows VLAN 10 as 'Primary,' which rules out this classification. Isolated VLANs permit only communication between their ports and a promiscuous port (typically a router or firewall), with no peer-to-peer traffic allowed between isolated ports. VLAN 10's role as a primary VLAN means it is the hub that connects the various secondary VLANs instead of being an isolated secondary. Therefore, this answer is incorrect.
- ✓
VLAN 10 is a primary private VLAN.
Why this is correct
This is correct because the command output unambiguously lists 'Private VLAN Type: Primary' under VLAN 10's configuration, along with its associated secondary VLANs. A primary private VLAN is the root VLAN that carries upstream/downstream traffic and interconnects promiscuous ports with the secondary VLANs mapped to it. The presence of associated secondary VLAN fields confirms VLAN 10 is the primary in this private VLAN domain, making this the accurate description.
- ✗
VLAN 10 is a normal data VLAN with no private VLAN features.
Why it's wrong here
The output clearly shows private VLAN configuration for VLAN 10, including a specific 'Private VLAN Type' and associated secondary VLAN fields, which would be absent on a normal data VLAN. A normal data VLAN operates as a simple broadcast domain with no promiscuous, community, or isolated port roles, whereas VLAN 10 is explicitly defined as a primary PVLAN with secondary mappings. Thus, stating it has no private VLAN features contradicts the very information shown in the exhibit.
Visual reference
About these practice questions
This 350-401 question is part of Courseiva's 1,923-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 350-401 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-401 exam.