Courseiva
NetworkhardMultiple ChoiceObjective-mapped

350-601 Network Practice Question

An engineer is designing an ACI fabric and needs to provide connectivity to an external Layer 3 network. Which construct must be configured to achieve this?

⚠ Common exam trap

Cisco often tests the distinction between internal fabric constructs (EPGs, VMM domains) and external connectivity constructs (L3Out), so the trap here is confusing an EPG or VMM domain as the solution for Layer 3 external routing when they serve entirely different purposes within the ACI architecture.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

L3Out

To connect an ACI fabric to an external Layer 3 network, you must configure an L3Out. An L3Out defines the external routed connectivity by associating a VRF with external interfaces, routing protocols (e.g., OSPF, BGP, EIGRP), and subnets that are advertised into or from the fabric. This construct allows ACI to exchange routes with the external Layer 3 domain.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • VMM domain

    Why it's wrong here

    VMM domain integrates with hypervisors, not external networks.

  • EPG

    Why it's wrong here

    EPG is a group of endpoints within a tenant.

  • L3Out

    Why this is correct

    L3Out provides external Layer 3 connectivity via routed interfaces or subinterfaces.

  • VXLAN tunnel

    Why it's wrong here

    ACI uses VXLAN internally but L3Out is the external connection.

Visual reference

R1 R2 R3 R4 10 100 10 100 OSPF picks R1→R2→R4 (cost 20) over R1→R3→R4 (cost 200)

About these practice questions

Courseiva writes every 350-601 question from scratch — 984 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This 350-601 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-601 exam.