Courseiva
hardMultiple ChoiceObjective-mapped

300-410 Practice Question: Runs the following command to troubleshoot a…

A network engineer runs the following command to troubleshoot a Policy-Based Routing (PBR) issue:

R1# debug ip policy

Policy routing debugging is on R1#

*Mar  1 00:15:30.789: IP: s=10.0.0.1 (FastEthernet0/0), d=20.0.0.1, len 100, policy match
*Mar  1 00:15:30.789: IP: s=10.0.0.1 (FastEthernet0/0), d=20.0.0.1, len 100, policy rejected
*Mar  1 00:15:30.789: IP: s=10.0.0.2 (FastEthernet0/0), d=20.0.0.2, len 100, policy match
*Mar  1 00:15:30.789: IP: s=10.0.0.2 (FastEthernet0/0), d=20.0.0.2, len 100, policy routed
*Mar  1 00:15:30.789: IP: FastEthernet0/0 to GigabitEthernet0/1 192.168.1.1

What does this output indicate?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

The route-map has multiple sequences or ACL entries; one source is permitted, the other is denied or fails next-hop check.

The debug shows two packets: the first from 10.0.0.1 was rejected, while the second from 10.0.0.2 was successfully routed to 192.168.1.1. This suggests that the route-map may have multiple sequences or the ACL differentiates between the sources.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • The route-map has multiple sequences or ACL entries; one source is permitted, the other is denied or fails next-hop check.

    Why this is correct

    The different treatment indicates different match conditions or set clause outcomes.

  • Both packets should have been rejected due to a misconfiguration.

    Why it's wrong here

    One was routed, so not both rejected.

  • The next-hop 192.168.1.1 is unreachable for the first packet.

    Why it's wrong here

    If unreachable, both would likely be rejected.

  • The ACL is blocking all traffic from 10.0.0.1.

    Why it's wrong here

    The packet matched (policy match), so ACL allowed it; rejection is due to set clause.

Visual reference

Source Router + ACL permit 10.0.0.0/8 deny any Server 10.0.0.5 ✓ 192.168.1.1 ✗ dropped ACLs evaluate top-down; first match wins — implicit deny all at end

About these practice questions

Courseiva writes every 300-410 question from scratch — 1,966 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This 300-410 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 300-410 exam.