Courseiva
Question 195 of 1,420
mediumMultiple SelectObjective-mapped

350-401 Practice Question: Which three statements about VRF path isolation…

Which three statements about VRF path isolation in a service provider network are true? (Choose three.)

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

VRFs allow multiple customers to share the same physical infrastructure while keeping their traffic isolated.

Correct: VRFs isolate customer traffic; MPLS VPN uses VRFs with route targets; VRF-aware features like NAT and QoS can be applied per VRF. Incorrect: VRFs do not replace VLANs; VRF-lite does not use labels.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • VRFs allow multiple customers to share the same physical infrastructure while keeping their traffic isolated.

    Why this is correct

    Correct because each VRF maintains separate forwarding tables, providing Layer 3 isolation.

  • In MPLS VPN, VRFs are combined with route targets to control route distribution between PE routers.

    Why this is correct

    Correct because route targets (import/export) determine which VRFs receive which routes.

  • VRF-aware features such as NAT, QoS, and ACLs can be applied per VRF to enforce path isolation policies.

    Why this is correct

    Correct because Cisco IOS supports VRF-aware services for granular control.

  • VRF can be used to replace VLANs for Layer 2 isolation.

    Why it's wrong here

    Incorrect because VRF is a Layer 3 concept, while VLANs operate at Layer 2.

  • In VRF-lite, path isolation is achieved using MPLS labels.

    Why it's wrong here

    Incorrect because VRF-lite does not use MPLS; it relies on separate routing tables.

Visual reference

Inside (Private) PC-A 10.0.0.1 PC-B 10.0.0.2 NAT Router Outside (Public) 203.0.113.1 Inside Global Server PAT: many private IPs share one public IP via unique port numbers

About these practice questions

Courseiva creates original exam-style practice questions with explanations and wrong-answer analysis. It does not publish real exam questions, exam dumps, or protected exam content. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

Last reviewed: Jun 18, 2026

Question Discussion

Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.

Loading comments…

Sign in to join the discussion.

This 350-401 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-401 exam.