mediumMultiple SelectObjective-mapped
CCNP Practice Question: Which three statements about path isolation using…
Which three statements about path isolation using VRF are true? (Choose three.)
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
VRFs allow overlapping IP addresses between different virtual networks on the same router.
Path isolation with VRF ensures that traffic from different tenants or departments does not interfere. The correct answers highlight that VRFs provide separate forwarding tables, that overlapping IP addresses are possible, and that VRF-lite can be used without MPLS. The incorrect options claim that VRFs guarantee end-to-end encryption (they do not) or that VRF-lite requires a full mesh of trunks (it does not).
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
VRFs allow overlapping IP addresses between different virtual networks on the same router.
Why this is correct
Correct because each VRF has its own routing table, so overlapping addresses are isolated.
- ✓
VRF-lite can provide path isolation without the use of MPLS.
Why this is correct
Correct because VRF-lite uses separate routing tables and interface assignments to isolate traffic.
- ✗
VRF-based path isolation ensures encryption of all data between VRFs.
Why it's wrong here
Incorrect because VRF provides logical separation but does not encrypt traffic; encryption requires additional mechanisms like IPsec.
- ✓
A VRF can be used to separate customer traffic in a service provider network.
Why this is correct
Correct because service providers commonly use VRFs to isolate different customer networks.
- ✗
VRF-lite requires a full mesh of trunk links between all routers in the network.
Why it's wrong here
Incorrect because VRF-lite can work with any topology; a full mesh is not required.
About these practice questions
This 350-401 question is part of Courseiva's 1,175-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 350-401 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-401 exam.