Courseiva
hardMultiple ChoiceObjective-mapped

300-410 Practice Question: A router is configured with PBR using a route-map…

A router is configured with PBR using a route-map that sets the next-hop to 10.0.0.2 for traffic matching ACL 100. The engineer also configures 'set ip default next-hop 10.0.0.3' in the same route-map sequence. Traffic that matches ACL 100 is forwarded to 10.0.0.2, but traffic that does not match ACL 100 is forwarded to 10.0.0.3 only if there is no route in the routing table. However, the engineer expects all unmatched traffic to go to 10.0.0.3 regardless of the routing table. What is the misunderstanding?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

The 'set ip default next-hop' command overrides the routing table only when no route exists; the engineer wants unconditional forwarding.

The 'set ip default next-hop' command is used only when the packet does not have a matching route in the routing table. If a route exists (even a default route), the packet follows the routing table. The engineer should use 'set ip next-hop' instead of 'set ip default next-hop' to force all unmatched traffic to the next-hop.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • The 'set ip default next-hop' command overrides the routing table only when no route exists; the engineer wants unconditional forwarding.

    Why this is correct

    'set ip default next-hop' is conditional on the absence of a route; 'set ip next-hop' is unconditional.

  • The route-map sequence order is incorrect; the default next-hop should be in a separate sequence.

    Why it's wrong here

    Order does not affect the behavior of set ip default next-hop.

  • The ACL 100 is blocking all traffic, so no traffic matches the set commands.

    Why it's wrong here

    The issue is about unmatched traffic, not matched.

  • The 'set ip default next-hop' command requires a 'set interface' command to work.

    Why it's wrong here

    No such requirement exists.

Visual reference

Source Router + ACL permit 10.0.0.0/8 deny any Server 10.0.0.5 ✓ 192.168.1.1 ✗ dropped ACLs evaluate top-down; first match wins — implicit deny all at end

About these practice questions

One of 1,966 original 300-410 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This 300-410 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 300-410 exam.