Courseiva
hardMultiple ChoiceObjective-mapped

300-410 Practice Question: An engineer configures PBR with a route-map that…

An engineer configures PBR with a route-map that sets the next-hop to 10.0.0.2 for traffic matching ACL 100. The route-map is applied inbound on interface GigabitEthernet0/1. Traffic from a host on that interface is forwarded via 10.0.0.2, but the engineer notices that packets with destination IP 10.0.0.2 itself are also being redirected, causing a loop. Why does this happen?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

The set ip next-hop command does not check if the next-hop is the router itself, so packets destined to the router are forwarded instead of being processed locally.

PBR processes all incoming packets, including those destined to the router itself. If the set next-hop points to the router's own IP, packets to that IP are forwarded back out, creating a loop. The route-map should include a match clause to exclude traffic destined to the router.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • The ACL 100 inadvertently matches the router's own IP address as source.

    Why it's wrong here

    The issue is destination, not source.

  • PBR is applied outbound, causing packets to the router to be re-routed.

    Why it's wrong here

    PBR is applied inbound on GigabitEthernet0/1, not outbound; outbound application would affect traffic leaving an interface, but the loop occurs because inbound PBR on the receiving interface intercepts packets destined for the router’s own IP (10.0.0.2) before the local delivery decision, redirecting them back out. This option is tempting because outbound PBR is commonly used to influence forwarding of transit traffic, and an engineer might misattribute the loop to a misapplied direction rather than recognising that PBR overrides the router’s local route for its own IP address.

  • The set ip next-hop command does not check if the next-hop is the router itself, so packets destined to the router are forwarded instead of being processed locally.

    Why this is correct

    PBR overrides local delivery; packets to the router's own IP are forwarded per the policy.

  • The route-map has a default route that sends all traffic to 10.0.0.2.

    Why it's wrong here

    Default routes are not part of PBR; the issue is specific to the set next-hop command.

Visual reference

Source Router + ACL permit 10.0.0.0/8 deny any Server 10.0.0.5 ✓ 192.168.1.1 ✗ dropped ACLs evaluate top-down; first match wins — implicit deny all at end

About these practice questions

One of 1,966 original 300-410 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This 300-410 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 300-410 exam.