350-401 Virtualization Practice Question
A network engineer is troubleshooting a Cisco Nexus 9000 leaf switch in a VXLAN EVPN fabric. Hosts in VLAN 200 on one leaf cannot reach hosts in VLAN 200 on a remote leaf, although the Type 2 routes are present in the EVPN table. The engineer confirms that the local VTEP address is correct. Which action should the engineer take to verify that the VNI is properly mapped to the VLAN and that traffic is placed into the correct overlay?
⚠ Common exam trap
The trap here is assuming that receiving EVPN routes proves the local overlay mapping is correct, when a missing VLAN-to-VNI binding still breaks forwarding.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Run show vxlan vni to confirm the VNI-to-VLAN mapping and check the VXLAN interface state
The show vxlan vni command reveals the VLAN-to-VNI bindings and the state of the VXLAN interface, which is exactly what must be validated when hosts in the same VLAN cannot communicate across leaves despite EVPN routes being present. Routing table, EVPN table, and NVE interface checks address different layers and do not confirm the overlay mapping for VLAN 200.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Run show ip route vrf all to confirm that the tenant prefixes are installed in the routing table
Why it's wrong here
Checking the routing table verifies Layer 3 reachability for routed prefixes but does not confirm that VLAN 200 is mapped to the correct VNI or that the VXLAN interface is operational. Since the hosts are in the same VLAN across leaves, the failure is at the Layer 2 overlay mapping level rather than in the IP routing table.
- ✗
Run show bgp l2vpn evpn to confirm that the Type 2 routes are received from the remote leaf
Why it's wrong here
The engineer already confirmed that Type 2 routes are present in the EVPN table, so rechecking BGP EVPN advertisements does not isolate the fault. The remaining suspect is local VLAN-to-VNI mapping or VXLAN interface state, which this command does not display.
- ✗
Run show interface nve1 to confirm that the NVE interface is administratively up and has the correct source address
Why it's wrong here
Verifying the NVE interface state and source address is useful, but the engineer already confirmed the local VTEP address is correct. The more specific check for whether VLAN 200 is bound to the intended VNI and whether the VXLAN interface is up is the VLAN-to-VNI mapping command, which directly addresses the symptom.
- ✓
Run show vxlan vni to confirm the VNI-to-VLAN mapping and check the VXLAN interface state
Why this is correct
The show vxlan vni command displays the mapping between VLANs and VNIs and indicates whether the VXLAN interface is up. If the VLAN-to-VNI mapping is missing or the VXLAN interface is down, hosts cannot be placed into the correct overlay, which matches the symptom of remote reachability failing despite EVPN routes being present.
Visual reference
Go deeper
Related to this question
Learn chapter
Network Monitoring and Troubleshooting Tools
Key term
Cisco Virtual Topology System
Cisco Virtual Topology System is a software-defined networking solution that creates and manages virtual network overlays across physical and virtual infrastructure for enterprise networks.
Key term
VXLAN
VXLAN is a network overlay technology that encapsulates Layer 2 Ethernet frames in UDP packets to extend VLANs across Layer 3 networks.
About these practice questions
One of 1,923 original 350-401 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Cisco exam blueprint
This 350-401 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-401 exam.