Skip to Content

Cisco 350-401: Understand the “deny” Statement in Route Maps for Policy-Based Routing

Learn how the “deny” statement affects traffic matching a route-map line in policy-based routing on Cisco routers. Discover the correct behavior and configuration requirements for the Cisco 350-401 ENCOR certification exam.

Table of Contents

Question

When the “deny” statement is used within a route map that is used for policy-based routing, how is the traffic that matches the deny route-map line treated?

A. Traffic is routed to the null 0 interface of the router and discarded.
B. Traffic is returned to the normal forwarding behavior of the router.
C. An additional sequential route-map line is needed to divert the traffic to the router’s normal forwarding behavior.
D. An additional sequential route-map line is needed to policy route this traffic.

Answer

B. Traffic is returned to the normal forwarding behavior of the router.

Explanation

When the “deny” statement is used within a route map that is used for policy-based routing, traffic that matches the deny route-map line is returned to the normal forwarding behavior of the router (Option B).

In policy-based routing, a route map is used to match traffic and specify the next hop or interface for routing. If a packet matches a “permit” statement in the route map, it is policy-routed according to the set actions defined in that route-map line. However, if a packet matches a “deny” statement, it is not policy-routed and instead follows the router’s normal forwarding behavior based on the routing table.

No additional route-map lines are needed to handle traffic matching a “deny” statement, as it automatically falls back to the default routing behavior (Options C and D are incorrect). The traffic is not discarded or routed to the null0 interface (Option A is incorrect).

Cisco 350-401 ENCOR certification exam practice question and answer (Q&A) dump with detail explanation and reference available free, helpful to pass the Cisco 350-401 ENCOR exam and earn Cisco 350-401 ENCOR certification.