mediumMultiple ChoiceObjective-mapped
300-410 Practice Question: Runs the following command to troubleshoot a BGP…
A network engineer runs the following command to troubleshoot a BGP Troubleshooting issue:
R1# debug ip bgp updates
BGP(0): 10.1.1.2 UPDATE rcvd w/ attr: nexthop 10.1.1.2, origin i, localpref 100, metric 0 BGP(0): 10.1.1.2 rcvd 192.168.1.0/24 BGP(0): 10.1.1.2 rcvd UPDATE w/ attr: nexthop 10.1.1.2, origin i, localpref 100, metric 0 BGP(0): 10.1.1.2 rcvd 192.168.2.0/24 BGP(0): 10.1.1.2 rcvd UPDATE w/ attr: nexthop 10.1.1.2, origin i, localpref 100, metric 0 -- unreachable BGP(0): 10.1.1.2 rcvd 192.168.3.0/24
What does this output indicate?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The neighbor 10.1.1.2 is withdrawing the prefix 192.168.3.0/24 while advertising 192.168.1.0/24 and 192.168.2.0/24.
The debug ip bgp updates output shows received BGP updates from neighbor 10.1.1.2. The third update includes 'unreachable', indicating that the neighbor is withdrawing the route 192.168.3.0/24. The other prefixes are being advertised normally.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The neighbor 10.1.1.2 is advertising three new prefixes: 192.168.1.0/24, 192.168.2.0/24, and 192.168.3.0/24.
Why it's wrong here
The third update includes 'unreachable', meaning it is a withdrawal, not an advertisement.
- ✓
The neighbor 10.1.1.2 is withdrawing the prefix 192.168.3.0/24 while advertising 192.168.1.0/24 and 192.168.2.0/24.
Why this is correct
The 'unreachable' keyword in the debug output indicates a route withdrawal for 192.168.3.0/24.
- ✗
The neighbor 10.1.1.2 is flapping all three prefixes due to a BGP session reset.
Why it's wrong here
The output shows only one withdrawal; the other two are normal updates. No flap is indicated.
- ✗
The neighbor 10.1.1.2 is sending a malformed update for 192.168.3.0/24, causing it to be marked as unreachable.
Why it's wrong here
The 'unreachable' is a standard BGP withdrawal mechanism, not an error condition.
Go deeper
Related to this question
About these practice questions
Courseiva writes every 300-410 question from scratch — 1,966 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
Same concept, more angles
1 more way this is tested on 300-410
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. A network engineer runs the following command to troubleshoot a BGP Troubleshooting issue: R1# debug ip bgp 10.1.1.2 updates BGP: 10.1.1.2 sending UPDATE with 2 prefixes, 0 withdrawn BGP: 10.1.1.2 sending UPDATE with 0 prefixes, 1 withdrawn What does this output indicate?
medium- ✓ A.The neighbor 10.1.1.2 is receiving two new routes and one route withdrawal.
- B.The neighbor 10.1.1.2 is sending two new routes and one route withdrawal.
- C.The BGP session with 10.1.1.2 is flapping.
- D.The neighbor 10.1.1.2 is not reachable.
Why A: The debug ip bgp updates with neighbor IP shows updates sent to the neighbor. The first line indicates an update with two prefixes advertised. The second line indicates an update with one prefix withdrawn. This is normal BGP operation.
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 300-410 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 300-410 exam.