350-401 Virtualization Practice Question
A network engineer is deploying Cisco ACI in a data center. The engineer needs to configure a bridge domain that allows traffic to be routed between two EPGs that are in different subnets. Which ACI object must be configured to enable inter-subnet routing within the bridge domain?
⚠ Common exam trap
The trap here is assuming that a contract or VRF alone enables inter-subnet routing, when the bridge domain must have unicast routing enabled and subnets defined.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Bridge domain with unicast routing enabled and subnets configured
Inter-subnet routing in Cisco ACI is enabled by configuring a bridge domain with unicast routing turned on and defining the necessary subnets. This allows the fabric to act as the default gateway for endpoints in those subnets and route traffic between them, even if they are in different EPGs.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Bridge domain with unicast routing enabled and subnets configured
Why this is correct
To enable inter-subnet routing within a bridge domain, you must configure the bridge domain with unicast routing enabled and define the subnets on the bridge domain. This allows the ACI fabric to route between EPGs in different subnets that are part of the same bridge domain.
- ✗
Subnet under the bridge domain with a scope of 'Advertised Externally'
Why it's wrong here
The scope of a subnet determines how it is advertised outside the fabric. 'Advertised Externally' is used for external routing, not for enabling inter-subnet routing within the bridge domain. Inter-subnet routing requires the subnet to be configured with a scope that includes 'Shared' or 'Private' and the bridge domain to have unicast routing enabled.
- ✗
VRF
Why it's wrong here
A VRF in Cisco ACI provides a separate routing and forwarding instance, similar to a VRF in traditional networks. While a VRF is necessary for routing, the bridge domain must have an associated subnet and be configured to allow routing between subnets; the VRF alone does not enable inter-subnet routing.
- ✗
Contract
Why it's wrong here
A contract in Cisco ACI defines the rules for communication between EPGs, such as which protocols and ports are allowed. However, it does not enable inter-subnet routing within a bridge domain; that requires a bridge domain with an associated subnet and a VRF.
Visual reference
Go deeper
Related to this question
About these practice questions
Courseiva writes every 350-401 question from scratch — 1,923 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Cisco exam blueprint
This 350-401 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-401 exam.