hardMultiple ChoiceObjective-mapped
300-410 Practice Question: Runs the following command on Router R1: R1# show…
A network engineer runs the following command on Router R1:
R1# show ip policy Interface Route-map
GigabitEthernet0/0 PBR-QOS
R1# show route-map PBR-QOS
route-map PBR-QOS, permit, sequence 10 Match clauses:
ip address (access-lists): 120
Set clauses:
ip next-hop 10.0.0.2
Policy routing matches: 500 packets, 45000 bytes
R1# show access-lists 120
Extended IP access list 120
10 permit ip 192.168.1.0 0.0.0.255 any R1# debug ip policy
Policy routing debugging is on
*Mar 1 00:05:23.123: IP: s=192.168.1.100 (GigabitEthernet0/0), d=8.8.8.8, len 100, policy match *Mar 1 00:05:23.123: IP: s=192.168.1.100 (GigabitEthernet0/0), d=8.8.8.8, len 100, policy rejected
Based on this output, what is the most likely problem?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The next-hop 10.0.0.2 is unreachable.
The debug output shows 'policy match' followed by 'policy rejected'. This indicates that the packet matched the route map, but the set clause was not applied because the next-hop is unreachable or the route map's set condition fails (e.g., verify-availability if used, or next-hop not in routing table). The show route-map shows matches, but the packet is rejected and forwarded normally.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
The next-hop 10.0.0.2 is unreachable.
Why this is correct
The debug 'policy rejected' after a match typically means the set next-hop is not reachable, so the packet is not policy-routed.
- ✗
The access list 120 is misconfigured.
Why it's wrong here
The debug shows a policy match, so the ACL is working.
- ✗
The route map is applied to the wrong interface.
Why it's wrong here
The debug shows packets arriving on GigabitEthernet0/0, which matches the interface where the route map is applied.
- ✗
The route map sequence number is incorrect.
Why it's wrong here
Sequence numbers are fine; the match occurs.
Visual reference
Go deeper
Related to this question
About these practice questions
One of 1,966 original 300-410 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
Same concept, more angles
1 more way this is tested on 300-410
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. A network engineer runs the following command on Router R1: R1# show ip policy Interface Route-map GigabitEthernet0/0 PBR-VOICE R1# show route-map PBR-VOICE route-map PBR-VOICE, permit, sequence 10 Match clauses: ip address (access-lists): 130 Set clauses: ip next-hop 192.168.10.1 Policy routing matches: 0 packets, 0 bytes R1# show access-lists 130 Extended IP access list 130 10 permit udp any any range 16384 32767 R1# show interfaces GigabitEthernet0/0 GigabitEthernet0/0 is up, line protocol is up Internet address is 10.1.1.1/24 R1# show ip route 192.168.10.1 % Network not in routing table Based on this output, what is the most likely problem?
medium- A.The access list 130 is not matching any traffic.
- ✓ B.The next-hop 192.168.10.1 is not reachable.
- C.The interface GigabitEthernet0/0 is down.
- D.The route map is missing a permit statement.
Why B: The next-hop 192.168.10.1 is not in the routing table. For PBR to forward packets to a next-hop, that next-hop must be reachable (in the routing table). If it is not, packets that match the route map are forwarded using the normal routing table instead. The zero matches could be because no traffic matching ACL 130 has arrived, or because the next-hop is missing, but the missing route is a clear issue.
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 300-410 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 300-410 exam.