hardMultiple ChoiceObjective-mapped
300-410 Practice Question: Runs the following command to troubleshoot a…
A network engineer runs the following command to troubleshoot a Policy-Based Routing (PBR) issue:
R1# debug ip policy
Policy routing debugging is on R1#
*Mar 1 00:05:23.123: IP: s=192.168.1.10 (FastEthernet0/0), d=10.1.1.100, len 100, policy match *Mar 1 00:05:23.123: IP: s=192.168.1.10 (FastEthernet0/0), d=10.1.1.100, len 100, policy rejected
What does this output indicate?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The packet matched the route-map but was not forwarded due to a failed next-hop check.
The debug output shows a packet from 192.168.1.10 to 10.1.1.100 that matches the policy but is then rejected. This typically occurs when the set clause specifies a next-hop that is unreachable or when verify-availability fails.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
The packet matched the route-map but was not forwarded due to a failed next-hop check.
Why this is correct
'policy rejected' indicates the packet matched but the set action could not be applied, often due to next-hop unreachability.
- ✗
The packet was successfully policy-routed to the next-hop.
Why it's wrong here
'policy rejected' means the packet was not forwarded per PBR.
- ✗
The route-map does not have a match clause for this packet.
Why it's wrong here
'policy match' indicates it matched the route-map.
- ✗
The packet was dropped due to an ACL deny.
Why it's wrong here
The debug shows policy match, so ACL allowed; rejection is due to set clause failure.
Go deeper
Related to this question
About these practice questions
One of 1,966 original 300-410 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
Same concept, more angles
1 more way this is tested on 300-410
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. A network engineer runs the following command to troubleshoot a Policy-Based Routing (PBR) issue: R1# debug ip policy Policy routing debugging is on R1# *Mar 1 00:10:45.456: IP: s=172.16.1.5 (FastEthernet0/0), d=8.8.8.8, len 64, policy match *Mar 1 00:10:45.456: IP: s=172.16.1.5 (FastEthernet0/0), d=8.8.8.8, len 64, policy routed *Mar 1 00:10:45.456: IP: FastEthernet0/0 to Serial0/0 10.1.1.2 What does this output indicate?
medium- ✓ A.The packet was successfully policy-routed to 10.1.1.2 via Serial0/0.
- B.The packet was dropped due to no matching route.
- C.The next-hop 10.1.1.2 is unreachable.
- D.The route-map is misconfigured with wrong ACL.
Why A: The debug shows a packet from 172.16.1.5 to 8.8.8.8 that matched the policy and was routed out of Serial0/0 to next-hop 10.1.1.2. This indicates successful PBR operation.
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 300-410 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 300-410 exam.