How many VLAN and Inter-VLAN Routing Scenarios questions are on this page?

This page has 6 VLAN and Inter-VLAN Routing Scenarios scenario questions for the SISE exam, each with detailed explanations and wrong-answer analysis.

How should I approach SISE scenario questions?

Read the full scenario before looking at the answer options. Identify the constraint or requirement in the scenario, then eliminate options that are generally true but wrong for this specific case. Scenario questions reward careful reading over pattern matching.

← Back to Cisco Implementing and Configuring Cisco Identity Services Engine (SISE, 300-715, CCNP Security) (SISE) questions

Scenario-based practice

VLAN and Inter-VLAN Routing Scenarios

Practise SISE VLAN and trunking questions covering access ports, trunk ports, allowed VLAN lists, native VLAN, inter-VLAN routing, and command-output troubleshooting.

Start full practice test Read exam guide

scenario questions

SISE

exam code

Cisco

vendor

Scenario guide

How to approach vlan and inter-vlan routing scenarios

VLAN misconfiguration is one of the top sources of connectivity failures in real networks and one of the most tested areas on the CCNA. These questions cover VLAN access ports, 802.1Q trunks, native VLANs, and router-on-a-stick or layer-3 switch inter-VLAN routing.

Quick answer

Routing questions usually test route selection (administrative distance, metric), how static routes are configured and when they are preferred over dynamic routing.

Administrative distance comparing routing sources.

Static route configuration: next-hop vs exit interface.

Default route propagation and the gateway of last resort.

Recursive routing table lookups.

Practice scenarios

Question 1mediummulti select

Open the full VLAN trunking answer →

Which TWO of the following are valid ways to assign a VLAN in an ISE Authorization Profile?

A
Using the VLAN common task
This is the GUI-based way to assign a VLAN.
B
Using the Filter-Id attribute
Why wrong: This is for ACL assignment.
C
Using the cisco-av-pair attribute
Why wrong: This is typically for dACLs or other custom features.
D
Using the Framed-IP-Address attribute
Why wrong: This is for IP assignment, not VLAN.
E
Using the Tunnel-Private-Group-ID attribute
This is the standard RADIUS attribute for VLANs.

Full breakdown with real-world context →

Question 2mediummulti select

Open the full VLAN trunking answer →

When configuring a RADIUS authorization policy for a dot1x deployment, which TWO attributes are commonly used to assign a dynamic VLAN?

A
Service-Type equals Framed
Why wrong: Generic attribute, not specific to VLANs.
B
Framed-IP-Address
Why wrong: Used for IP allocation, not VLAN assignment.
C
Tunnel-Type equals VLAN
Mandatory to define the tunnel type.
D
Tunnel-Medium-Type equals 802
Mandatory to specify the medium type for the tunnel.
E
Cisco-AV-Pair
Why wrong: Used for custom attributes, but not the standard way to set a VLAN.

Full breakdown with real-world context →

Question 3hardmulti select

Open the full VLAN trunking answer →

Which THREE of the following are potential reasons a device might be placed in a 'Quarantine' VLAN during the BYOD process?

A
Device failed MDM compliance check
Non-compliant devices are often isolated in quarantine.
B
User forgot their Wi-Fi password
Why wrong: BYOD uses certificates, not passwords.
C
Device OS version is below the minimum requirement
Security policies often mandate minimum OS versions.
D
Missing or expired client certificate
Without a valid certificate, the device cannot pass EAP-TLS auth.
E
The device is too new
Why wrong: New devices are usually allowed if they meet compliance.

Full breakdown with real-world context →

Question 4mediummultiple choice

Open the full VLAN trunking answer →

A network administrator needs to ensure that wired 802.1X devices are assigned a specific VLAN based on their AD group membership. Which component in the ISE Policy Set should be configured to map the AD group to a specific VLAN assignment?

A
Authentication Policy
Why wrong: Authentication policies define the identity source sequence, not authorization results.
B
Policy Set
Why wrong: The Policy Set is a container for policies, not the object defining result attributes.
C
Authorization Profile
The Authorization Profile contains the RADIUS attributes (such as Tunnel-Private-Group-ID) to assign the VLAN.
D
Authorization Policy
Why wrong: The policy rule matches the user, but the actual VLAN attribute is encapsulated in the Authorization Profile.

Full breakdown with real-world context →

Question 5mediummultiple choice

Open the full VLAN trunking answer →

A user is authenticated, but their authorization profile returns the wrong VLAN. Which troubleshooting tool in ISE is best suited to verify the attributes sent to the NAD?

A
Monitoring -> Alarms
Why wrong: Alarms are for system health, not individual session attributes.
B
Live Logs
The Live Logs provide a detailed breakdown of the RADIUS attributes returned to the NAD.
C
Policy Simulation
Why wrong: Simulation is for testing, not verifying production live sessions.
D
TCP Dump
Why wrong: This is for packet-level capture, not RADIUS attribute analysis.

Full breakdown with real-world context →

Question 6easymultiple choice

Open the full VLAN trunking answer →

Which option in the Cisco ISE Authorization Policy allows you to set a specific VLAN for a wireless client?

A
Policy Set Condition
Why wrong: Conditions determine if a rule is hit, not the result assigned.
B
Authorization Profile
VLAN tagging is a standard attribute provided by the Authorization Profile.
C
Identity Source Sequence
Why wrong: This handles user lookups only.
D
Authentication Policy
Why wrong: Authentication only verifies user credentials.

Full breakdown with real-world context →

These SISE practice questions are part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style SISE questions with detailed explanations, topic-based practice, mock exams, readiness tracking, and study analytics.

VLAN and Inter-VLAN Routing Scenarios

How to approach vlan and inter-vlan routing scenarios

Quick answer

Related SISE topic practice pages

Network Access Device Administration practice questions

BYOD practice questions

Endpoint Compliance practice questions

Web Auth And Guest Services practice questions

Profiler practice questions

Policy Enforcement practice questions

Architecture And Deployment practice questions

SISE fundamentals practice questions

SISE scenario practice questions

SISE troubleshooting practice questions

Practice scenarios

Which TWO of the following are valid ways to assign a VLAN in an ISE Authorization Profile?

When configuring a RADIUS authorization policy for a dot1x deployment, which TWO attributes are commonly used to assign a dynamic VLAN?

Which THREE of the following are potential reasons a device might be placed in a 'Quarantine' VLAN during the BYOD process?

A network administrator needs to ensure that wired 802.1X devices are assigned a specific VLAN based on their AD group membership. Which component in the ISE Policy Set should be configured to map the AD group to a specific VLAN assignment?

A user is authenticated, but their authorization profile returns the wrong VLAN. Which troubleshooting tool in ISE is best suited to verify the attributes sent to the NAD?

Which option in the Cisco ISE Authorization Policy allows you to set a specific VLAN for a wireless client?