hardMultiple ChoiceObjective-mapped
300-410 Practice Question: A router is configured with PBR using a route-map…
A router is configured with PBR using a route-map that sets the next-hop to 192.168.2.1 for traffic matching ACL 101. The engineer also configures 'ip route 0.0.0.0 0.0.0.0 192.168.1.1' as a default route. Traffic that matches ACL 101 is correctly forwarded to 192.168.2.1, but traffic that does not match ACL 101 is dropped instead of using the default route. What is the most likely explanation?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The route-map has an implicit deny at the end, so unmatched traffic is dropped.
PBR with a route-map that does not have a default action (e.g., 'set ip default next-hop' or an implicit permit) will drop non-matching traffic by default. The route-map must include a permit statement with no match to allow normal routing for unmatched traffic.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
The route-map has an implicit deny at the end, so unmatched traffic is dropped.
Why this is correct
Route-maps have an implicit deny; unmatched packets are discarded unless a permit sequence with no match is added.
- ✗
The default route is not installed in the routing table due to administrative distance.
Why it's wrong here
The default route is present, but PBR overrides it for matched traffic; unmatched traffic should fall back to routing.
- ✗
The ACL 101 is blocking all other traffic.
Why it's wrong here
ACLs only define match criteria; they do not block traffic in PBR.
- ✗
The 'ip policy route-map' command is applied outbound, causing unmatched traffic to be dropped.
Why it's wrong here
PBR is applied inbound; outbound application would not affect incoming packets.
Visual reference
Go deeper
Related to this question
About these practice questions
One of 1,966 original 300-410 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 300-410 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 300-410 exam.