hardMultiple ChoiceObjective-mapped
300-410 Practice Question: A router is configured with PBR using a route-map…
A router is configured with PBR using a route-map that sets the next-hop to 10.0.0.2 for traffic from subnet 192.168.1.0/24. The route-map is applied inbound on interface GigabitEthernet0/0. The engineer also configures 'ip policy route-map' on the same interface. However, the engineer notices that PBR is not working for traffic that is fragmented. What is the most likely reason?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
PBR only matches the first fragment; subsequent fragments are forwarded based on the routing table because they lack Layer 4 headers.
PBR processes only the first fragment of a fragmented packet; subsequent fragments do not contain Layer 4 information (e.g., TCP/UDP ports) and may not match the ACL if it includes Layer 4 criteria. Additionally, PBR may not be applied to non-initial fragments by default, causing them to be forwarded normally.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
PBR only matches the first fragment; subsequent fragments are forwarded based on the routing table because they lack Layer 4 headers.
Why this is correct
Fragments after the first do not have Layer 4 info, so ACLs with port matching fail; PBR may not apply.
- ✗
The route-map is missing a 'match fragment' command.
Why it's wrong here
No such command exists in PBR.
- ✗
Fragmented packets are always dropped by PBR.
Why it's wrong here
They are not dropped but may be forwarded normally.
- ✗
The ACL in the route-map is using a 'deny' statement for fragmented packets.
Why it's wrong here
ACLs can match fragments, but PBR behavior is specific to the first fragment.
Visual reference
Go deeper
Related to this question
About these practice questions
Courseiva writes every 300-410 question from scratch — 1,966 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 300-410 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 300-410 exam.