mediumMultiple ChoiceObjective-mapped
350-401 Practice Question: Is configuring a Cisco SD-WAN solution for a…
A network engineer is configuring a Cisco SD-WAN solution for a retail chain with hundreds of stores. The engineer wants to use a centralized data policy to steer all YouTube traffic to a specific WAN link (broadband) to save MPLS bandwidth. The engineer creates a policy that matches YouTube traffic by destination IP and sets the preferred color to 'biz-internet'. After applying the policy, the engineer tests and finds that YouTube traffic is still using the MPLS link. The vEdge routers show that the policy is received and active. What is the most likely reason?
⚠ Common exam trap
Cisco often tests the misconception that a data policy only needs a destination IP match to steer traffic, but the trap here is that the policy must also specify the correct VPN (or service-side VRF) and site list to scope the policy to the intended traffic flows.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The policy does not include a match condition for the correct VPN or site list.
A centralized data policy in Cisco SD-WAN must include match conditions for both the VPN (service-side VRF) and the site list to which the policy applies. Without specifying the correct VPN or site list, the policy may be received and active on the vEdge but will not match the traffic flows, causing them to fall through to the default routing behavior (e.g., MPLS). The policy matches destination IPs, but if the VPN or site scope is missing or incorrect, the vEdge will not apply the policy to the relevant traffic.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The vEdge routers have not rebooted after the policy was applied.
Why it's wrong here
Incorrect because policy changes take effect immediately without reboot.
- ✗
The data policy was applied on the vEdge instead of the vSmart.
Why it's wrong here
Incorrect because the engineer stated the policy was applied on the vSmart.
- ✓
The policy does not include a match condition for the correct VPN or site list.
Why this is correct
Correct because the policy must be associated with the specific VPN and site list to apply to the traffic.
- ✗
YouTube traffic is encrypted and cannot be matched by destination IP.
Why it's wrong here
Incorrect because YouTube traffic can be matched by destination IP even if encrypted.
Go deeper
Related to this question
Learn chapter
Network Architecture Fundamentals
Key term
Cisco SD-WAN
Cisco SD-WAN is a software-defined wide area network architecture that separates the control and data planes to centrally manage and optimize traffic across multiple WAN connections.
Key term
Virtual Routing and Forwarding
Virtual Routing and Forwarding (VRF) is a technology that allows a single physical router to operate like multiple independent routers by keeping separate routing tables and forwarding decisions for each instance.
About these practice questions
One of 1,175 original 350-401 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 350-401 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-401 exam.