350-401 Architecture Practice Question
A network architect is designing a three-tier campus network with a pair of Cisco Catalyst 9500 switches at the core. The design requires that the core layer avoid maintaining a large MAC address table and instead forward traffic based on Layer 3 reachability. Which technology should be implemented on the core switches to meet this requirement?
⚠ Common exam trap
The trap here is assuming that any high-availability technology like StackWise Virtual automatically converts the core to Layer 3 forwarding, when in fact it only provides logical device consolidation.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Layer 3 switching with routed ports
In a three-tier campus design, the core layer should be optimized for high-speed Layer 3 forwarding. Using routed ports on the core switches eliminates Layer 2 switching and MAC address table scaling concerns, allowing the core to forward solely based on Layer 3 reachability. This aligns with Cisco's recommended design for large campus networks.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
VLAN Trunking Protocol pruning
Why it's wrong here
VTP pruning reduces unnecessary VLAN traffic on trunk links by preventing flooded traffic for VLANs that have no active ports, but it does not change the core's forwarding method. The core would still maintain MAC address tables for the VLANs it carries, so this does not meet the requirement for Layer 3-based forwarding.
- ✓
Layer 3 switching with routed ports
Why this is correct
Configuring the core switches with routed ports (no switchport) enables pure Layer 3 forwarding, eliminating MAC address table entries for those interfaces and relying on routing protocols or static routes. This directly satisfies the requirement to avoid a large MAC address table and forward based on Layer 3 reachability, which is typical in a three-tier campus core.
- ✗
Routed access layer
Why it's wrong here
A routed access layer moves Layer 3 boundaries to the access switches, which can reduce spanning-tree domains and improve convergence, but it does not specifically address the core layer's MAC address table size. The core would still need to handle Layer 2 forwarding for any remaining VLANs, so this is not the correct solution for the core requirement.
- ✗
Cisco StackWise Virtual
Why it's wrong here
Cisco StackWise Virtual allows two physical switches to operate as a single logical switch, providing high availability and simplified management, but it does not inherently change the forwarding behavior of the core to be purely Layer 3. The core would still maintain MAC address tables for any Layer 2 VLANs present, so this does not meet the stated requirement.
Quick reference
Access Control Model Comparison
| Model | Acronym | Who Controls Access? | Best For |
|---|---|---|---|
| Discretionary Access Control | DAC | Resource owner | Small teams, file shares |
| Mandatory Access Control | MAC | System / security labels | Classified govt / military |
| Role-Based Access Control | RBAC | Administrator (via roles) | Enterprise environments |
| Attribute-Based Access Control | ABAC | Policy engine (user + resource attributes) | Fine-grained, dynamic policies |
| Rule-Based Access Control | RuBAC | System rules / ACLs | Firewall rules, network ACLs |
Go deeper
Related to this question
About these practice questions
Courseiva writes every 350-401 question from scratch — 1,923 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Cisco exam blueprint
This 350-401 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-401 exam.