hardMultiple Choice
350-401 Practice Question: Runs the following command on Router R9: R9# show…
A network engineer runs the following command on Router R9:
R9# show policy-map interface GigabitEthernet0/0.900
GigabitEthernet0/0.900
Service-policy input: QOS_POLICY_VRF_G Class-map: CLASS_VOICE (match-all) 0 packets, 0 bytes 5 minute offered rate 0 bps, drop rate 0 bps Match: ip dscp ef (46) police: cir 1000000 bps, bc 31250 bytes, be 31250 bytes conformed 0 packets, 0 bytes; actions: transmit exceeded 0 packets, 0 bytes; actions: drop violated 0 packets, 0 bytes; actions: drop Class-map: CLASS_DATA (match-all) 0 packets, 0 bytes 5 minute offered rate 0 bps, drop rate 0 bps Match: ip dscp af31 (26) police: cir 2000000 bps, bc 62500 bytes, be 62500 bytes conformed 0 packets, 0 bytes; actions: transmit exceeded 0 packets, 0 bytes; actions: drop violated 0 packets, 0 bytes; actions: drop Class-map: class-default (match-any) 0 packets, 0 bytes 5 minute offered rate 0 bps, drop rate 0 bps Match: any
Based on this output, what can be concluded?
⚠ Common exam trap
Cisco often tests the ability to read the 'Service-policy input' or 'output' direction in the command output, as candidates may overlook the direction keyword and incorrectly assume the policy is applied outbound or not applied at all.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
A QoS policy is applied inbound on GigabitEthernet0/0.900, policing voice and data traffic
The output shows the 'Service-policy input: QOS_POLICY_VRF_G' line, confirming that a QoS policy is applied inbound on GigabitEthernet0/0.900. The policy contains two user-defined class maps: CLASS_VOICE (matching DSCP EF) with a police rate of 1 Mbps and CLASS_DATA (matching DSCP AF31) with a police rate of 2 Mbps, both with conform/transmit and exceed/violate drop actions. This demonstrates that both voice and data traffic are being policed, making option C correct.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
No QoS policy is applied to this interface
Why it's wrong here
The interface configuration output explicitly contains a 'service-policy input' command that references a named policy map, which proves that a QoS policy is indeed applied. The policy-map defines multiple class-maps, and the interface statement binds it to ingress traffic on GigabitEthernet0/0.900. Therefore, saying that no QoS policy is applied directly contradicts the visible configuration and ignores the service-policy statement.
- ✗
The policy only polices voice traffic
Why it's wrong here
The displayed policy-map includes two separate class-maps that each have a 'police' action. One class matches voice traffic by DSCP EF, and the other matches data traffic by DSCP AF31, and both classes enforce their own CIR and conform/ exceed actions. Thus, the policy polices both voice and data, not voice only, even though the voice class may appear first or be highlighted.
- ✓
A QoS policy is applied inbound on GigabitEthernet0/0.900, policing voice and data traffic
Why this is correct
The configuration shows 'service-policy input' on GigabitEthernet0/0.900, which places the QoS policy in the inbound direction for that subinterface. The policy-map contains class-maps for voice (DSCP EF) and data (DSCP AF31), each with a 'police' command that applies token-bucket rate limiting. Therefore, the correct interpretation is that inbound traffic on this subinterface is classified and policed for both voice and data types.
- ✗
The policy is applied outbound
Why it's wrong here
The 'service-policy input' directive is unequivocally an ingress direction, meaning the policy inspects and polices traffic as it enters the interface, not as it leaves. For an outbound policy, Cisco IOS would use 'service-policy output', which is absent from the given configuration. Mistaking this is a common directional misinterpretation, but the 'input' keyword unambiguously indicates inbound.
Go deeper
Related to this question
About these practice questions
One of 1,923 original 350-401 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 350-401 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-401 exam.