350-401 Virtualization Practice Question
A network engineer is deploying Cisco ACI in a data center. The engineer needs to configure a bridge domain that provides Layer 2 connectivity between endpoints in the same tenant. Which two statements about Cisco ACI bridge domains are true? (Choose two.)
⚠ Common exam trap
The trap here is assuming that a bridge domain inherently provides Layer 3 routing or is limited to a single subnet, when in fact it requires VRF association for routing and supports multiple subnets.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
A bridge domain can contain multiple subnets.
In Cisco ACI, a bridge domain is a Layer 2 construct that can contain multiple subnets and must be associated with a VRF to enable Layer 3 routing. The VRF provides the routing context, and multiple subnets allow flexible IP addressing within the same bridge domain. VLAN pools are used for VLAN allocation but are not a direct requirement for the bridge domain itself.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
A bridge domain requires a VLAN pool to be defined in the fabric access policies.
Why it's wrong here
A VLAN pool is used for VLAN allocation in fabric access policies, but it is not a direct requirement for a bridge domain itself. Bridge domains are logical constructs that can be mapped to VLANs via VLAN pools, but the bridge domain definition does not mandate a VLAN pool. The association is through the application EPG or external connections.
- ✓
A bridge domain can contain multiple subnets.
Why this is correct
A Cisco ACI bridge domain can have multiple subnets configured under it. Each subnet is associated with a gateway IP address on the ACI fabric. This allows a single bridge domain to support multiple IP subnets, providing flexibility in addressing and segmentation within the same Layer 2 domain.
- ✗
A bridge domain can only contain a single subnet.
Why it's wrong here
This is false because a Cisco ACI bridge domain supports multiple subnets. Each subnet can have its own gateway IP. This multi-subnet capability allows for efficient use of bridge domains without creating separate Layer 2 domains for each subnet, simplifying configuration and reducing overhead.
- ✗
A bridge domain provides Layer 3 routing between subnets by default.
Why it's wrong here
A bridge domain does not provide Layer 3 routing by default. Routing between subnets within the same bridge domain or between different bridge domains requires the bridge domain to be associated with a VRF and the appropriate contracts to be in place. By default, bridge domains are Layer 2 constructs.
- ✓
A bridge domain must be associated with a VRF to provide Layer 3 routing.
Why this is correct
In Cisco ACI, a bridge domain is associated with a VRF to enable Layer 3 routing. Without a VRF association, the bridge domain operates only at Layer 2. The VRF provides the routing context, allowing endpoints in different bridge domains to communicate at Layer 3 if policies permit.
Visual reference
Go deeper
Related to this question
Learn chapter
SDN Controllers and Cisco ACI
Key term
Virtual Routing and Forwarding
Virtual Routing and Forwarding (VRF) is a technology that allows a single physical router to operate like multiple independent routers by keeping separate routing tables and forwarding decisions for each instance.
Key term
Fabric Fundamentals
Fabric Fundamentals is the set of core concepts behind a network fabric, where switches and routers form a single logical system that simplifies traffic forwarding and automation.
About these practice questions
Courseiva writes every 350-401 question from scratch — 1,923 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Cisco exam blueprint
This 350-401 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-401 exam.