mediumMultiple Choice
350-401 Practice Question: Consider the following configuration: class-map…
Consider the following configuration:
class-map match-any VOICE match ip dscp ef class-map match-any VIDEO match ip dscp af41 match ip dscp af42
What is the effect of the match-any keyword in these class-maps?
⚠ Common exam trap
Cisco often tests the confusion between `match-any` (logical OR) and `match-all` (logical AND), expecting candidates to mistakenly think that `match-any` requires all conditions or that it causes a packet to be placed into multiple classes simultaneously.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
A packet matching any one of the specified DSCP values is classified into that class.
The `match-any` keyword in a Cisco class-map means that a packet needs to match only one of the listed match criteria to be classified into that class. In the VIDEO class-map, a packet matching either DSCP AF41 or AF42 will be classified as VIDEO. This is the default behavior for class-maps when no keyword is specified, but explicitly using `match-any` reinforces that logical OR operation is applied.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
A packet must match all specified DSCP values to be classified into the class.
Why it's wrong here
In a class-map configured with match-any, the classifier is satisfied when a packet matches any one of the listed DSCP values. Requiring all specified DSCP values would be logically impossible because a single DSCP field can hold only one value; match-all applies to multiple different match types (e.g., DSCP and input interface), not multiple DSCP values. Thus, this statement confuses the meaning of match-all.
- ✗
A packet matching either DSCP EF or AF41 will be classified into both classes.
Why it's wrong here
In a policy-map, class maps are evaluated sequentially, and once a packet matches a class, it is processed by that class's actions and generally not by later classes unless explicitly configured (e.g., police with continue). A packet with DSCP EF could match a class defined for EF, but it will not be classified into both the EF class and the AF41 class because the first matching class in policy-map order wins. Therefore, classification into both classes simultaneously is incorrect.
- ✓
A packet matching any one of the specified DSCP values is classified into that class.
Why this is correct
The match-any keyword in a class-map means the match conditions are combined with a logical OR. Consequently, a packet is classified into that class if it matches any one of the specified DSCP values—for example, either DSCP EF or AF41. This is the standard behavior for DSCP-based classification in the Modular QoS CLI (MQC).
- ✗
The match-any keyword is invalid for DSCP matching; only match-all is supported.
Why it's wrong here
The match-any keyword is perfectly valid for DSCP matching in a class map; both match-any and match-all are supported in MQC. If match-any is configured, the class map matches packets that satisfy any one of the DSCP statements, whereas match-all (the default) requires all statements to be true. Since DSCP is a single value, using match-all with multiple DSCP statements would not work as intended, but the keyword itself is not invalid.
Go deeper
Related to this question
About these practice questions
Courseiva writes every 350-401 question from scratch — 1,923 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 350-401 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-401 exam.