The correct answer is that the route-map is applied to an interface but no traffic has matched it yet. This conclusion is drawn directly from the "Policy routing matches: 0 packets, 0 bytes" counters for both sequences in the show route-map TEST output; these counters increment only when policy-based routing actively processes a packet that matches a route-map clause, so zeros confirm the route-map is configured and attached but has not yet encountered any matching traffic. On the Cisco CCNP ENARSI 300-410 exam, this scenario tests your ability to interpret route-map statistics and distinguish between a route-map that is merely defined versus one that is applied and actively matching traffic—a common trap is assuming a defined route-map with match clauses is already in use. Remember that "Policy routing matches" is a live counter specific to PBR, not to redistribution or other route-map applications. Memory tip: if the match count is zero, the route-map is just sitting there waiting—like a bouncer at an empty club.
300-410 Device Access Control Practice Question
This 300-410 practice question tests your understanding of device access control. Examine the command output carefully: the correct answer depends on what the output actually shows, not on general recall alone. After answering, compare your reasoning against the explanation and wrong-answer breakdown below. Once you have made your selection, read the full explanation to reinforce the concept and understand why each distractor is designed to mislead on exam day.
A network engineer runs the following command on Router R1:
R1# show route-map TEST
route-map TEST, permit, sequence 10
Match clauses:
ip address (access-lists): 100
Set clauses:
metric 50
Policy routing matches: 0 packets, 0 bytes
route-map TEST, deny, sequence 20
Match clauses:
ip address (access-lists): 101
Set clauses:
Policy routing matches: 0 packets, 0 bytes
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The route-map is applied to an interface but no traffic has matched it yet.
The output shows 'Policy routing matches: 0 packets, 0 bytes' for both sequences, which indicates the route-map has been applied to an interface (for policy-based routing) but no traffic has matched any of the match clauses yet. This is the only conclusion that can be drawn from the provided data.
Key principle: Answer the scenario, not the keyword: identify the specific constraint before choosing the most familiar-sounding option.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
✓
The route-map is applied to an interface but no traffic has matched it yet.
Why this is correct
The 'Policy routing matches: 0 packets' indicates that the route-map is configured but has not yet been used to route any packets.
Related concept
Read the scenario before looking for a memorised answer.
✗
The route-map is misconfigured because sequence 20 does not have a set clause.
Why it's wrong here
A deny sequence does not require a set clause; it simply denies matching traffic.
✗
The route-map will set the metric to 50 for all packets.
Why it's wrong here
Only packets matching ACL 100 will have the metric set; others will be denied or not matched.
✗
The route-map is applied globally and is affecting all routing decisions.
Why it's wrong here
Route-maps must be explicitly applied to an interface or routing process to take effect.
Common exam traps
Common exam trap: answer the scenario, not the keyword
Cisco often tests the distinction between route-maps used for policy-based routing (which show 'Policy routing matches' counters) versus those used for redistribution or routing protocol filtering (which do not show those counters), leading candidates to incorrectly assume a route-map is globally applied.
Detailed technical explanation
How to think about this question
Policy-based routing (PBR) uses route-maps applied to interfaces via the 'ip policy route-map' command, and the 'show route-map' command displays per-sequence packet counters that increment only when a packet matches the match criteria and the route-map action is permit. The absence of set clauses in a deny sequence is valid because deny sequences simply skip further processing for matched packets, and no set actions are applied. In real-world scenarios, these counters are critical for troubleshooting PBR misconfigurations or verifying traffic flow.
KKey Concepts to Remember
Read the scenario before looking for a memorised answer.
Find the constraint that changes the correct option.
Eliminate answers that are true in general but not in this case.
TExam Day Tips
→Watch for words such as best, first, most likely and least administrative effort.
→Review why wrong options are wrong, not only why the correct option is correct.
Key takeaway
Answer the scenario, not the keyword: identify the specific constraint before choosing the most familiar-sounding option.
Real-world example
How this comes up in practice
A security administrator must allow nursing staff to reach a patient records server while blocking access from the guest Wi-Fi VLAN. After applying an extended ACL, traffic is still blocked from nursing workstations. The ACL was applied outbound instead of inbound on the wrong interface. Questions like this test ACL direction and placement rules.
Related glossary terms
Concepts from this question explained
These glossary pages explain the core terms tested in this 300-410 question in full detail.
Device Access Control — This question tests Device Access Control — Read the scenario before looking for a memorised answer..
What is the correct answer to this question?
The correct answer is: The route-map is applied to an interface but no traffic has matched it yet. — The output shows 'Policy routing matches: 0 packets, 0 bytes' for both sequences, which indicates the route-map has been applied to an interface (for policy-based routing) but no traffic has matched any of the match clauses yet. This is the only conclusion that can be drawn from the provided data.
What should I do if I get this 300-410 question wrong?
Identify which exam domain this question belongs to, review the core concept, then practise similar questions from the same domain.
What is the key concept behind this question?
Read the scenario before looking for a memorised answer.
About these practice questions
Courseiva creates original exam-style practice questions with explanations and wrong-answer analysis. It does not publish real exam questions, exam dumps, or protected exam content. Learn why practice questions differ from exam dumps →
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
This 300-410 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 300-410 exam.
Question Discussion
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
Sign in to join the discussion.