mediumMultiple ChoiceObjective-mapped
300-410 Practice Question: Is troubleshooting PBR on a Cisco router where…
A network engineer is troubleshooting PBR on a Cisco router where traffic from VLAN 100 (192.168.10.0/24) should be forwarded to next-hop 10.10.10.2 via a route map named 'VLAN100-PBR'. The engineer has applied the route map to interface GigabitEthernet0/0.100 (subinterface) using 'ip policy route-map VLAN100-PBR'. The engineer verifies that the route map is correctly configured with 'match ip address 100' and 'set ip next-hop 10.10.10.2', and the access list 100 matches the source subnet. However, traffic from VLAN 100 is still forwarded using the routing table. What is the most likely cause?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The traffic is arriving on the physical interface GigabitEthernet0/0 instead of the subinterface GigabitEthernet0/0.100.
PBR applied to a subinterface will only process traffic that arrives on that specific subinterface. If the traffic is arriving on the physical interface or another subinterface, it will not be matched. The engineer must ensure the traffic actually enters the subinterface where the policy is applied.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
The traffic is arriving on the physical interface GigabitEthernet0/0 instead of the subinterface GigabitEthernet0/0.100.
Why this is correct
Correct because PBR is applied per-interface; traffic must ingress the subinterface where the policy is configured.
- ✗
The access list 100 is missing the 'permit' keyword; PBR only processes permit statements.
Why it's wrong here
Incorrect because access lists default to deny, but if the ACL is missing 'permit', no traffic would match; however, the symptom is that traffic is forwarded normally (routing table), not dropped, indicating the ACL is likely correct.
- ✗
The 'set ip next-hop' command must be followed by 'force' to override the routing table.
Why it's wrong here
Incorrect because 'force' is not a valid keyword for 'set ip next-hop' in PBR.
- ✗
The route map must be applied to the VLAN interface (SVI) instead of the subinterface.
Why it's wrong here
Incorrect because PBR can be applied to subinterfaces; the issue is not about the type of interface.
Visual reference
Go deeper
Related to this question
About these practice questions
Courseiva writes every 300-410 question from scratch — 1,966 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 300-410 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 300-410 exam.