Courseiva
mediumMultiple ChoiceObjective-mapped

300-410 Practice Question: Runs the following command on Router R1: R1# show…

A network engineer runs the following command on Router R1:

R1# show ip policy
Interface     Route-map

GigabitEthernet0/1 PBR-MAP

R1# show route-map PBR-MAP

route-map PBR-MAP, permit, sequence 10 Match clauses:

ip address (access-lists): 101

Set clauses:

ip next-hop verify-availability 10.1.1.2 10 track 1

Policy routing matches: 150 packets, 12000 bytes

R1# show track 1
Track 1
  IP SLA 1 reachability

Reachability is Down 1 change, last change 00:05:20 Latest operation return code: timeout

Tracked by:

ROUTE-MAP 0

Based on this output, what is the most likely outcome?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

Packets matching ACL 101 are routed normally via the routing table.

The route map uses 'ip next-hop verify-availability' with tracking. Track 1 is down because IP SLA 1 reports unreachability. Therefore, the set clause will not be applied, and packets matching ACL 101 will not be forwarded to 10.1.1.2; they will be routed normally via the routing table.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • Packets matching ACL 101 are forwarded to 10.1.1.2 regardless.

    Why it's wrong here

    The verify-availability feature checks the track object; since track 1 is down, the next-hop is not used.

  • Packets matching ACL 101 are dropped.

    Why it's wrong here

    PBR does not drop packets when the set clause is not applied; they are forwarded using the routing table.

  • Packets matching ACL 101 are routed normally via the routing table.

    Why this is correct

    When the tracked object is down, PBR skips the set clause and the packet is forwarded using the destination-based routing table.

  • The route map is removed from the interface due to the track failure.

    Why it's wrong here

    The route map remains applied; only the next-hop selection is affected.

Visual reference

Source Router + ACL permit 10.0.0.0/8 deny any Server 10.0.0.5 ✓ 192.168.1.1 ✗ dropped ACLs evaluate top-down; first match wins — implicit deny all at end

Go deeper

Related to this question

About these practice questions

One of 1,966 original 300-410 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

Same concept, more angles

1 more way this is tested on 300-410

These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.

Variation 1. A network engineer runs the following command on Router R1: R1# show ip policy Interface Route-map GigabitEthernet0/0 PBR-TRACK R1# show route-map PBR-TRACK route-map PBR-TRACK, permit, sequence 10 Match clauses: ip address (access-lists): 170 Set clauses: ip next-hop verify-availability 10.0.0.2 10 track 2 Policy routing matches: 100 packets, 8000 bytes R1# show track 2 Track 2 IP SLA 2 reachability Reachability is Up 2 changes, last change 00:01:30 Latest operation return code: ok Tracked by: ROUTE-MAP 0 R1# show ip route 10.0.0.2 Routing entry for 10.0.0.2/32 Known via "eigrp 1", distance 90, metric 28160 Last update from 192.168.1.2 on GigabitEthernet0/1 Based on this output, what is the most likely behavior for packets matching ACL 170?

medium
  • A.Packets are forwarded to 10.0.0.2.
  • B.Packets are forwarded using the routing table because the next-hop is not reachable.
  • C.Packets are dropped because the track object is not configured correctly.
  • D.Packets are load-balanced between the next-hop and the routing table.

Why A: The route map uses 'ip next-hop verify-availability' with track 2. Track 2 is Up (IP SLA 2 reachability is ok). Therefore, the next-hop 10.0.0.2 is considered available, and packets matching ACL 170 are forwarded to 10.0.0.2.

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This 300-410 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 300-410 exam.