CCNA Hsrp Questions

27 questions · Hsrp topic · All types, answers revealed

1
MCQhard

A network administrator has configured HSRP between RouterA and RouterB for VLAN 10. End hosts using the virtual IP 192.168.1.1 as their default gateway experience intermittent connectivity losses, and pings to 192.168.1.1 often fail. The output of 'show standby brief' on both routers shows the state as Active. What is the most likely cause?

A.The virtual IP address is configured on only one router.
B.The routers are configured with mismatched HSRP authentication methods.
C.The HSRP group number on one router is set to 0.
D.The priority on both routers is configured to the same value.
AnswerB

Mismatched authentication (e.g., MD5 vs. text) causes each router to disregard the other's HSRP hellos. Each then assumes no peers exist and becomes Active, leading to both routers claiming the virtual IP and MAC, which results in ARP table flapping and intermittent connectivity.

Why this answer

When both routers show the HSRP state as Active, a 'dual-active' scenario exists, which causes intermittent connectivity because both routers forward traffic for the virtual IP. Mismatched HSRP authentication methods (e.g., one router using plain-text authentication and the other using MD5) prevent the routers from exchanging proper Hello messages, so they fail to negotiate a single Active router. This is the most likely cause because authentication mismatches break the HSRP adjacency, leading to both routers assuming the Active role.

Exam trap

Cisco often tests the concept that HSRP authentication mismatches cause a dual-active failure, while candidates may incorrectly assume that equal priorities or group number 0 are the root cause.

Why the other options are wrong

A

A missing virtual IP on one router does not cause both to be Active; the router without the virtual IP cannot claim the Active role for that address.

C

A group number mismatch does not cause both routers to appear as Active for the same virtual IP; they would be in separate groups.

D

Equal priority does not lead to multiple Active routers; HSRP uses the interface IP address as a tiebreaker to elect a single Active router.

2
Multi-Selectmedium

Which TWO statements about HSRP active/standby election, priority, and preempt are true?

Select 2 answers
A.The router with the highest priority becomes the active router.
B.If priorities are equal, the router with the highest MAC address becomes active.
C.Preemption is enabled by default on all HSRP routers.
D.The 'show standby' command can be used to verify the active and standby routers, priority, and preemption status.
E.The router with the lowest priority becomes the standby router.
AnswersA, D

HSRP uses priority (0–255, default 100) to determine the active router; the highest priority wins.

Why this answer

In HSRP, the router with the highest priority (default 100, range 0-255) becomes the active router (A). If priorities are equal, the router with the highest IP address on the subnet wins, not the highest MAC address (B). Preemption is disabled by default; 'standby preempt' must be configured for a higher-priority router to take over (C).

The 'show standby' command displays active/standby router roles, priority values, and preemption status, verifying D. The standby router is the one with the second-highest priority, not the lowest (E).

Exam trap

Cisco often tests the misconception that HSRP uses MAC address as a tiebreaker (it uses IP address) and that preemption is enabled by default (it is not).

Why the other options are wrong

B

HSRP tie-breaking uses the highest IP address on the HSRP interface, not the MAC address. The MAC address is used for virtual MAC assignment but does not influence election.

C

Preemption is disabled by default in HSRP; it must be explicitly configured with the 'standby preempt' command. Without preemption, a higher priority router will not take over active role from a lower priority router that is already active.

E

The standby router is the router with the second-highest priority, not the lowest. The lowest priority router would only become standby if all other routers fail, as it is the least preferred.

3
PBQhard

You are connected to R1. Configure HSRP on R1 and R2 so that R1 is the active gateway for VLAN 100 with a virtual IP of 192.0.2.254. R1 should preempt and track its G0/1 interface to decrement priority by 20 if it goes down. Currently, both routers show active for the group, and the virtual IP is incorrectly set. Troubleshoot and fix the configuration on R1 only.

Hints

  • Check the virtual IP address in the standby configuration.
  • Ensure R1's priority is higher than R2's to become active.
  • Preempt must be configured to re-elect after a priority change.
A.Change the virtual IP to 192.0.2.254 and set priority to 110.
B.Change the virtual IP to 192.0.2.254 and remove the track command.
C.Change the virtual IP to 192.0.2.254 and configure preempt on R2.
D.Change the virtual IP to 192.0.2.254 and set priority to 100.
AnswerA
solution
! R1
interface GigabitEthernet0/0.100
standby 1 ip 192.168.100.254
standby 1 priority 110
standby 1 preempt

Why this answer

The issue is that both routers are active because the virtual IP on R1 was 192.168.100.254, which is not in the same subnet as the interface IP (192.0.2.1/24), so HSRP couldn't form a common group. Changing the virtual IP to 192.0.2.254 fixes the subnet mismatch. Additionally, setting R1's priority to 110 ensures it becomes the active router because it has preempt configured, and the higher priority overrides R2's default 100.

The track command remains correct as it reduces priority if G0/1 fails.

Exam trap

Trap: Candidates may focus on the track command or preempt, but the primary issue is the virtual IP mismatch and default priority. Always verify the virtual IP belongs to the same subnet as the interface and adjust priority to ensure the desired active router.

Why the other options are wrong

B

Removing the track command would prevent R1 from decrementing priority when G0/1 fails, violating the requirement to track the interface.

C

Configuring preempt on R2 might allow it to take over, but the task only asks to fix R1; the primary issue is the virtual IP mismatch on R1.

D

Setting priority to 100 (the default) without preempt? Actually, R1 already has preempt, but with equal priority, the highest IP wins, which might be R2, so R1 might not become active. Increasing priority to 110 is required.

4
PBQhard

You are connected to R1. The network requires HSRP for default gateway redundancy on subnet 192.168.1.0/24. R2 should be the active router, and R1 the standby. Currently, both routers show as active. Configure R1 with priority 90, enable preempt, ensure the virtual IP is 192.168.1.254, and configure tracking of interface GigabitEthernet0/1 (subnet 203.0.113.0/30) so that if R1's tracked interface goes down, its priority decreases by 20. Verify the final state with 'show standby brief'.

Network Topology
G0/0192.168.1.1/24G0/0192.168.1.2/24G0/1203.0.113.1/30R2switchR1ISP

Hints

  • Both routers show active; check priority values and preempt configuration.
  • The virtual IP must match on both routers; verify it's 192.168.1.254.
  • Use 'standby 1 track' with the correct interface and decrement value.
A.interface GigabitEthernet0/0 standby version 2 standby 1 ip 192.168.1.254 standby 1 priority 90 standby 1 preempt standby 1 track GigabitEthernet0/1 20
B.interface GigabitEthernet0/0 standby version 2 standby 1 ip 192.168.1.254 standby 1 priority 110 standby 1 preempt standby 1 track GigabitEthernet0/1 20
C.interface GigabitEthernet0/0 standby version 2 standby 1 ip 192.168.1.254 standby 1 priority 90 standby 1 preempt standby 1 track GigabitEthernet0/1 30
D.interface GigabitEthernet0/0 standby version 2 standby 1 ip 192.168.1.254 standby 1 priority 90 standby 1 preempt standby 1 track GigabitEthernet0/0 20
AnswerA
solution
! R1
interface GigabitEthernet0/0
standby 1 priority 90
standby 1 preempt
standby 1 track GigabitEthernet0/1 20
end

Why this answer

The scenario requires R2 to be the HSRP active router. By default, both routers have priority 100, and HSRP election would select the router with the higher IP address as active if priorities are equal. To ensure R2 becomes active, R1's priority must be lowered to 90.

Additionally, tracking interface GigabitEthernet0/1 with a decrement of 20 is configured so that if R1's uplink fails, its priority drops to 70, further preventing it from becoming active. The correct configuration on R1 sets priority 90, enables preempt, and tracks the correct interface with decrement 20. Options B, C, and D are wrong because: B sets a higher priority (110) which would make R1 active; C uses an incorrect decrement of 30; and D tracks the wrong interface (Gig0/0 instead of Gig0/1).

Exam trap

Trap: Candidates may think that increasing priority ensures redundancy, but the requirement specifies R2 as active, so R1's priority must be lower. Also, ensure the tracked interface is the correct one (Gig0/1) and the decrement value matches exactly.

Why the other options are wrong

B

The priority value is higher than the default, which would make R1 active instead of standby.

C

The decrement value does not match the required 20; it is 30.

D

The tracked interface is wrong; it should be GigabitEthernet0/1, not GigabitEthernet0/0.

5
MCQhard

A network administrator is troubleshooting a connectivity issue on a subnet where two routers, R1 and R2, are configured with HSRP to provide a virtual gateway. Hosts on the subnet can ping the virtual IP address but cannot reach destinations outside the subnet. The administrator discovers that R1 is the active HSRP router. What is the most likely root cause of the problem?

A.Configure a default route on R1 pointing to the next-hop router.
B.Enable preemption on both routers to ensure the higher-priority router stays active.
C.Change the virtual MAC address on R2 to match the one on R1.
D.Increase the hello timer on R1 to match the hold timer on R2.
AnswerA

This is correct because R1 is the Active HSRP router and is responsible for forwarding traffic from hosts to external networks. Without a default route, R1 drops packets destined outside the subnet.

Why this answer

Hosts can ping the virtual IP address, so HSRP is functioning locally. The failure to reach external destinations indicates a routing problem, not an HSRP issue. The active router, R1, must have a default route pointing to the next-hop router to forward traffic beyond the subnet.

Incorrect options address HSRP settings (preemption, MAC address, timers) that are irrelevant because the virtual gateway is already reachable.

Exam trap

Cisco often tests the misconception that HSRP configuration alone provides full connectivity, when in fact the routers still need proper routing (e.g., a default route) to forward traffic beyond the subnet.

Why the other options are wrong

B

Preemption is not needed because the current Active router already has the higher priority (110 vs 100). Preemption only becomes relevant when a higher-priority router recovers after a failure and needs to reclaim the Active role. The issue here is routing, not HSRP state stability.

C

The virtual MAC address is automatically derived from the HSRP group number and is the same for both routers when they are in the same group. R2's local virtual MAC is different because it is used only when R2 becomes Active. The mismatch in the output is normal and does not affect connectivity.

D

The hello and hold timers are consistent (3 sec hello, 10 sec hold) and are not causing any issues. Adjusting timers would not fix the routing problem. The root cause is the lack of a default route on the Active router.

6
MCQmedium

A network engineer is configuring HSRP on a pair of Cisco routers to provide first-hop redundancy for a subnet. The goal is to ensure that the router with the highest IPv4 address always becomes the active router, and that it automatically reclaims the active role after a failure. The engineer configures priority 100 on both routers. Which additional configuration is required to meet these objectives?

A.Configure priority 150 on one router and priority 50 on the other.
B.Configure the preempt command on both routers.
C.Configure the standby 1 priority 100 command on both routers.
D.Configure the standby 1 priority 100 on one router and standby 1 priority 50 on the other.
AnswerB

With equal priority, HSRP elects the active router based on the highest IP address. The preempt command ensures that if a router with a higher IP address (and equal priority) recovers after a failure, it will preempt the current active router and reclaim the active role, as required.

Why this answer

Option B is correct because HSRP uses priority to determine the active router, but without the preempt command, a router with a higher priority will not take over the active role if it comes online after a failure. Since both routers have the same priority (100), the router with the highest IPv4 address will become active initially, but to ensure it automatically reclaims the active role after a failure, preempt must be enabled on both routers. This allows the router with the higher IP address (and equal priority) to preempt the current active router when it recovers.

Exam trap

Cisco often tests the misconception that priority alone determines active router selection and that preempt is only needed when priorities differ, but the trap here is that without preempt, even with equal priorities, the router with the higher IP address will not reclaim the active role after a failure.

Why the other options are wrong

A

Configuring different priorities (150 and 50) would force the router with priority 150 to become active regardless of IP address, contradicting the requirement to use the highest IPv4 address for election. HSRP uses priority as the primary criterion; only when priorities are equal does the highest IP address break the tie.

C

The command 'standby 1 priority 100' is already implied by setting priority 100; it does not enable preemption. With equal priority and no preempt, both routers will remain in standby state indefinitely because HSRP cannot determine an active router without a tiebreaker or preemption. The active router election requires either a priority difference or preempt to resolve the tie.

D

Configuring different priorities (100 and 50) would make the router with priority 100 active regardless of IP address, which violates the requirement to use the highest IPv4 address for election. The requirement explicitly states that priorities must remain equal so that the highest IP address determines the active router.

7
MCQmedium

What problem is HSRP designed to solve?

A.Layer 2 switching loops
B.Loss of the default gateway if one router fails
C.Duplicate MAC addresses on trunks
D.Wireless interference
AnswerB

Correct. HSRP provides first-hop redundancy.

Why this answer

HSRP provides a virtual default gateway so hosts continue forwarding traffic even if one physical gateway router fails.

Exam trap

Avoid confusing HSRP with load balancing or security protocols. Remember, HSRP is about redundancy, not traffic distribution or encryption.

Why the other options are wrong

A

Layer 2 switching loops are prevented by Spanning Tree Protocol (STP), not by HSRP. HSRP operates at Layer 3 to provide default gateway redundancy, not loop prevention.

C

Duplicate MAC addresses on trunks are typically caused by misconfigurations or bridging loops, not by HSRP. HSRP uses a virtual MAC address that is unique and does not cause duplication issues.

D

Wireless interference is a physical layer issue related to radio frequency signals, not something HSRP addresses. HSRP is a Layer 3 redundancy protocol for routers.

8
Drag & Dropmedium

Drag and drop the following steps into the correct order to configure HSRP version 2 on an interface and ensure the router becomes the active router, then verify the HSRP state.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps
Order
1Step 1
2Step 2
3Step 3
4Step 4

Why this order

HSRP version must be set before group configuration, then the virtual IP is assigned, followed by priority and preempt to control active router election.

Exam trap

The exam trap is that candidates often misorder the steps, especially placing version after group creation or preempt before priority. Remember: version first, then group, then priority, then preempt.

9
PBQhard

You are connected to R1. Configure HSRP on interface GigabitEthernet0/0 so that R1 becomes the active router for group 10 with a virtual IP of 192.0.2.254/24. Ensure that R1 preempts if it regains a higher priority, and track interface GigabitEthernet0/1 to decrement priority by 20 if it goes down. Additionally, troubleshoot the current configuration: both routers are showing as active for group 11 with virtual IP 203.0.113.1, which is incorrect — the virtual IP should be 203.0.113.254 for group 11.

Network Topology
G0/010.0.0.1/30G0/010.0.0.2/30linkR1R2

Hints

  • Use 'standby <group> preempt' to enable preemption.
  • Track interface uses 'standby <group> track <interface> <decrement>'.
  • Correct the virtual IP for group 11 to 203.0.113.254.
A.interface GigabitEthernet0/0 standby 10 ip 192.0.2.254 standby 10 preempt standby 10 track GigabitEthernet0/1 20 interface GigabitEthernet0/0 standby 11 ip 203.0.113.254 standby 11 preempt
B.interface GigabitEthernet0/0 standby 10 ip 192.0.2.254 standby 10 preempt standby 10 track GigabitEthernet0/1 20 interface GigabitEthernet0/0 standby 11 ip 203.0.113.254
C.interface GigabitEthernet0/0 standby 10 ip 192.0.2.254 standby 10 track GigabitEthernet0/1 20 interface GigabitEthernet0/0 standby 11 ip 203.0.113.254 standby 11 preempt
D.interface GigabitEthernet0/0 standby 10 ip 192.0.2.254 standby 10 preempt standby 10 track GigabitEthernet0/1 20 interface GigabitEthernet0/0 standby 11 ip 203.0.113.1 standby 11 preempt
AnswerA
solution
! R1
interface GigabitEthernet0/0
standby 11 ip 203.0.113.254
standby 10 preempt
standby 10 track GigabitEthernet0/1 20
standby 11 preempt

Why this answer

Both routers showing active for group 11 indicates a mismatch in the virtual IP address or missing preempt. To fix group 11, correct the virtual IP to 203.0.113.254 with 'standby 11 ip 203.0.113.254'. Add preempt with 'standby 11 preempt' to break the tie.

For group 10, to ensure R1 becomes active, you must configure preempt ('standby 10 preempt') and interface tracking ('standby 10 track GigabitEthernet0/1 20'). However, with default priority, R1 might not become active if R2's interface IP is higher; therefore, a priority command like 'standby 10 priority 110' may be necessary. The options shown do not include that priority command, so in practice the configuration is incomplete.

Exam trap

Many candidates forget that HSRP preempt requires a higher priority to actually trigger preemption; without explicitly configuring a higher priority, the router may remain in Standby state even with preempt enabled.

Why the other options are wrong

B

This option lacks 'standby 11 preempt', so R1 will not preempt for group 11, failing to resolve the active-active tie.

C

This option omits 'standby 10 preempt', so R1 will not preempt for group 10 as required.

D

This option uses the incorrect virtual IP 203.0.113.1 for group 11, which does not match the required 203.0.113.254.

10
PBQhard

You are connected to R1. Configure HSRP so that R1 becomes the active router for VLAN 10, with a virtual IP of 192.168.10.1. Ensure that R1 preempts if it comes back online after a failure. Also, configure R1 to decrement its HSRP priority by 20 if its GigabitEthernet0/1 interface goes down. The current configuration shows both routers as active — identify and fix the issues.

Network Topology
Gi0/0.10192.168.10.3/24Gi0/0.10192.168.10.2/24switchR1R2

Hints

  • Both routers show Active because they have equal priority and no preempt.
  • The virtual IP configured is 192.168.10.254 but the task requires 192.168.10.1.
  • To ensure R1 is active, set its priority higher than R2's default (100) and enable preempt.
A.Change the virtual IP to 192.168.10.1, set priority to 110, enable preempt, and track interface GigabitEthernet0/1 with decrement 20.
B.Change the virtual IP to 192.168.10.1, set priority to 100, enable preempt, and track interface GigabitEthernet0/1 with decrement 20.
C.Change the virtual IP to 192.168.10.254, set priority to 110, enable preempt, and track interface GigabitEthernet0/1 with decrement 20.
D.Change the virtual IP to 192.168.10.1, set priority to 110, enable preempt, but do not track any interface.
AnswerA
solution
! R1
interface GigabitEthernet0/0.10
standby 10 ip 192.168.10.1
standby 10 priority 110
standby 10 preempt
standby 10 track GigabitEthernet0/1 20

Why this answer

The scenario indicates both routers appear as Active, which is abnormal. This could result from a misconfigured virtual IP or group number mismatch. The required fix is to set the virtual IP to 192.168.10.1, assign R1 a higher priority (110 vs R2's default 100), enable preempt so R1 reclaims active role after failure, and track GigabitEthernet0/1 with a decrement of 20 to lower priority if that interface goes down.

Exam trap

Watch for three common mistakes: (1) forgetting to set a higher priority to win the election, (2) using the wrong virtual IP address, and (3) omitting the track command when required. Also note that preempt alone does not guarantee active status if priorities are equal.

Why the other options are wrong

B

HSRP election uses priority as the primary tie-breaker; equal priority leads to comparison of primary IP addresses, which may not favor R1.

C

The virtual IP address must be consistent across all HSRP routers and match the configured gateway; a mismatch prevents proper operation.

D

Without tracking, R1's priority remains unchanged even if the uplink fails, so R1 would remain active despite losing connectivity, causing traffic black-holing.

11
MCQhard

Two routers, R1 and R2, have been configured with HSRP for VLAN 10 to provide default gateway redundancy to hosts. The virtual IP address is 192.168.10.1. After configuration, end hosts report inconsistent connectivity to the gateway, and a failover test reveals that when the active router is shut down, connectivity is lost. The network administrator checks the HSRP status on both routers. Based on the output shown, what is the most likely cause of the redundancy failure?

A.R2 has a lower HSRP priority than R1, so it cannot become standby.
B.The HSRP group number is mismatched between R1 and R2.
C.The HSRP authentication strings do not match.
D.HSRP version 1 is used on R1 while version 2 is used on R2.
AnswerB

R1 uses group 10, while R2 uses group 20. This creates two isolated HSRP processes with no shared virtual MAC or failover capability, which directly explains the redundancy failure.

Why this answer

HSRP uses the group number to identify the virtual router instance. If the group numbers on R1 and R2 do not match, they will not form a neighbor relationship or exchange HSRP messages, so neither router will know the other exists. This prevents failover: when the active router goes down, the standby router does not take over because it never learned about the active router's state.

The output would show that each router believes it is the active router (or that no standby exists), confirming the mismatch.

Exam trap

Cisco often tests the HSRP group number mismatch as a subtle cause of redundancy failure because candidates focus on priority or authentication and overlook the fundamental requirement that the group number must be identical on all routers in the same virtual router group.

Why the other options are wrong

A

The output shows R2 is Active in its own group (20); priority only affects role election within the same group. The real problem is separate group numbers.

C

With mismatched authentication, the state would not be Active. The exhibit clearly shows Active on both routers, so authentication is not the cause.

D

Version mismatch would not change the displayed group number; the group number discrepancy is the direct evidence shown in the exhibit.

12
Drag & Dropmedium

Drag and drop the following steps into the correct order to configure and verify HSRP with priority and preemption on an interface.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps
Order
1Step 1
2Step 2
3Step 3
4Step 4
5Step 5
6Step 6

Why this order

First, enter interface configuration mode to start configuring the specific interface. Next, assign an IP address because HSRP requires a real IP on the interface for communication between HSRP routers. After that, define the HSRP group and virtual IP, which clients use as their default gateway.

Then set a higher priority to influence the active router election; priority must be configured before enabling preemption, as preemption relies on priority to determine when to take over. Finally, exit configuration mode and verify with show standby to confirm the HSRP state.

13
Drag & Dropmedium

Drag and drop the following steps into the correct order to configure HSRP version 2 on a pair of routers, set the active router via priority and preempt, then verify the election and failover process.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps
Order
1Step 1
2Step 2
3Step 3
4Step 4

Why this order

The correct order is: first configure HSRP version 2 on both routers to ensure they use the same protocol version. Then configure the virtual IP address; the virtual IP must be set before priority and preempt because priority and preempt reference the HSRP group that already has a virtual IP. Next, set the priority on the desired active router; priority determines which router becomes active when both have equal preempt settings.

Finally, enable preempt to allow the higher-priority router to take over if it recovers after a failure. The verify step confirms the active router and failover behavior.

Exam trap

Do not confuse the order of HSRP configuration steps. Always set the version first, then the virtual IP, then priority, then preempt. Many candidates mistakenly configure priority or preempt before the virtual IP, which leads to errors.

14
Drag & Dropmedium

Drag and drop the following steps into the correct order to configure HSRP on a router and verify the active/standby election process.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps
Order
1Step 1
2Step 2
3Step 3
4Step 4

Why this order

The order begins with interface and HSRP group configuration, then priority and preempt. Verification shows the current state, and failover testing validates the election process works correctly.

Exam trap

A common mistake is to think that preemption must be configured after priority; however, the CLI does not enforce this order. The real trap is placing verification after failover testing, as verification should first confirm the initial HSRP state, then failover can be tested.

15
Drag & Dropmedium

Drag and drop the following steps into the correct order to configure and verify HSRP on a router interface.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps
Order
1Step 1
2Step 2
3Step 3
4Step 4
5Step 5
6Step 6
7Step 7

Why this order

The correct order begins by entering interface configuration mode, because all HSRP commands are applied at the interface level. Next, assign a physical IPv4 address to the interface, as HSRP requires a Layer 3 interface with an IP address to function. Set HSRP version 2 before defining the HSRP group to ensure compatibility with extended group numbers and newer features.

Then configure the HSRP group number and virtual IP address to create the standby group. After that, set the router’s priority and enable preemption; these steps customize the active/standby election process. Finally, verify the configuration with the show standby command to confirm HSRP operation.

16
PBQhard

You are connected to R1. The network uses HSRP for default gateway redundancy. Currently, both routers R1 and R2 are in the 'Active' state for HSRP group 10, causing traffic issues. Configure HSRP on R1 so that it becomes the Active router with a priority of 150, preempt enabled, a virtual IP of 192.168.1.254, and track interface GigabitEthernet0/1 so that if it goes down, the priority decrements by 20. Then verify the configuration with 'show standby brief'.

Network Topology
G0/0192.168.1.1/24G0/0192.168.1.2/24G0/110.0.0.1/30G0/110.0.0.2/30linkR1switchR2

Hints

  • HSRP virtual IP must be different from the interface IPs of both routers.
  • Preempt allows a router with higher priority to become Active after recovering.
  • Track interface decrements the priority when the tracked interface goes down.
A.standby 10 ip 192.168.1.254 standby 10 priority 150 standby 10 preempt standby 10 track GigabitEthernet0/1 20
B.standby 10 ip 192.168.1.254 standby 10 priority 150 standby 10 preempt standby 10 track GigabitEthernet0/1
C.standby 10 ip 192.168.1.254 standby 10 priority 150 standby 10 track GigabitEthernet0/1 20
D.standby 10 ip 192.168.1.254 standby 10 priority 150 standby 10 preempt standby 10 track GigabitEthernet0/1 10
AnswerA
solution
! R1
interface GigabitEthernet0/0
standby 10 ip 192.168.1.254
standby 10 priority 150
standby 10 preempt
standby 10 track GigabitEthernet0/1 20

Why this answer

The required HSRP configuration consists of all four commands: virtual IP, priority 150, preempt, and tracking with a decrement of 20. Option A lists them correctly. Option B fails because the track command is missing the decrement value.

Option C is incorrect because it omits the 'standby 10 preempt' command; without preempt, the router will not take over the active role even when its priority is higher. Option D uses a decrement of 10 instead of 20, which does not meet the requirement.

Exam trap

Watch out for the decrement value in the track command; it must match the requirement exactly. Also, ensure the virtual IP does not match any interface IP. Preempt must be enabled for the router to take over when it has higher priority.

Why the other options are wrong

B

The track command is missing the decrement value; without it, the router will not adjust its priority when the interface fails.

C

The preempt command is missing; without preempt, a router with higher priority cannot take over the active role.

D

The track command uses a decrement of 10 instead of the required 20, so the priority drop is incorrect.

17
Drag & Dropmedium

Drag and drop the following steps into the correct order to configure and verify HSRP active/standby election, including priority, preempt, virtual IP, and failover verification.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps
Order
1Step 1
2Step 2
3Step 3
4Step 4

Why this order

The order ensures the interface is ready, then priority and preempt are set to influence the election, followed by the virtual IP and verification of failover behavior.

Exam trap

Do not configure the virtual IP before setting priority and preempt, as the router may become active with default priority and then preempt later, causing unnecessary flapping. Always configure the interface first, then priority/preempt, then virtual IP.

18
PBQhard

You are connected to R1 via the console. The routers R1 and R2 are directly connected using their GigabitEthernet0/0 interfaces, which are in VLAN 100 and use subnet 192.168.1.0/24. Both routers are currently showing as active for HSRP group 10. Configure HSRP on R1's GigabitEthernet0/0 to become the active router (priority 150, preempt enabled, virtual IP 192.168.1.254). Ensure that if R1's GigabitEthernet0/1 WAN interface goes down, its HSRP priority decrements by 30 so that R2 can take over. Also, correct any existing misconfiguration in the HSRP setup.

Hints

  • Check if preempt is actually enabled by looking for the 'P' flag in show standby brief.
  • Both routers being active often indicates a duplicate virtual IP or missing preempt.
  • Use 'standby 10 preempt' to enable preemption, and 'standby 10 priority 150' to set priority.
A.Configure: interface GigabitEthernet0/0, standby 10 ip 192.168.1.254, standby 10 priority 150, standby 10 preempt, standby 10 track GigabitEthernet0/1 decrement 30. Also, ensure preempt is enabled on R1 (currently missing) and correct any duplicate virtual IP.
B.Configure: interface GigabitEthernet0/0, standby 10 ip 192.168.1.254, standby 10 priority 150, standby 10 preempt, standby 10 track GigabitEthernet0/1 decrement 30. No other changes needed because preempt is already enabled.
C.Configure: interface GigabitEthernet0/0, standby 10 ip 192.168.1.254, standby 10 priority 150, standby 10 preempt, standby 10 track GigabitEthernet0/1 decrement 30. Also, change the virtual IP to 192.168.1.1 because the current one is wrong.
D.Configure: interface GigabitEthernet0/0, standby 10 ip 192.168.1.254, standby 10 priority 150, standby 10 preempt, standby 10 track GigabitEthernet0/1 decrement 30. Also, remove the standby 10 track command from R2 to prevent conflicts.
AnswerA
solution
! R1
interface GigabitEthernet0/0
standby 10 priority 150
standby 10 preempt
standby 10 track GigabitEthernet0/1 decrement 30
end

Why this answer

Both routers showing as active means either R2 has an equal or higher priority or preempt is missing, preventing a single active election. To fix this, on R1's GigabitEthernet0/0 interface, set standby priority 150 with preempt enabled. Add tracking of GigabitEthernet0/1 with decrement 30 so the priority drops to 120 if the WAN link fails, allowing R2 to become active.

The existing misconfiguration is that preempt is either absent or disabled, causing a split-brain scenario; this solution makes R1 the active router and provides correct failover.

Exam trap

Always verify HSRP preempt with 'show standby' to see the 'P' flag; configuration alone does not guarantee it is active. Also, remember that both routers showing as active is a symptom of missing preempt or duplicate virtual IP, not necessarily a tracking issue.

Why the other options are wrong

B

Preempt is not already enabled—otherwise both routers would not show as active. Failing to enable preempt leaves the split‑brain condition unresolved.

C

The virtual IP 192.168.1.254 is correctly assigned to the HSRP group; changing it would replace the default gateway for all hosts, breaking connectivity.

D

Removing tracking from R2 is irrelevant; the problem is R1's missing preempt and low priority, not R2's configuration. Both routers showing active is not caused by tracking on R2.

19
PBQhard

You are connected to R1, a multilayer switch acting as an HSRP active gateway for VLAN 100. The network requires R1 to be the active router with a virtual IP of 192.168.100.1. Currently, both R1 and the peer router R2 show as active in 'show standby brief', and the virtual IP is misconfigured. Configure HSRP on R1 to fix these issues: set priority to 110, enable preempt, correct the virtual IP, and track interface GigabitEthernet0/1 (decrement priority by 20 if it goes down).

Network Topology
linkG0/1:10.0.0.1/30linkR1R2upstream router

Hints

  • Check the virtual IP address configured under the standby group — it should match the expected virtual IP.
  • Preempt is disabled by default; verify if it's configured to allow R1 to become active after a failure.
  • Use 'show standby' to see all details including tracking status.
A.interface Vlan100 standby 100 ip 192.168.100.1 standby 100 priority 110 standby 100 preempt standby 100 track GigabitEthernet0/1 20
B.interface Vlan100 standby 100 ip 192.168.100.254 standby 100 priority 110 standby 100 preempt standby 100 track GigabitEthernet0/1 20
C.interface Vlan100 standby 100 ip 192.168.100.1 standby 100 priority 100 standby 100 preempt standby 100 track GigabitEthernet0/1 20
D.interface Vlan100 standby 100 ip 192.168.100.1 standby 100 priority 110 standby 100 track GigabitEthernet0/1 20
AnswerA
solution
! R1
interface Vlan100
standby 100 ip 192.168.100.1
standby 100 priority 110
standby 100 preempt
standby 100 track GigabitEthernet0/1 20

Why this answer

The problem had multiple issues: the virtual IP was wrong (192.168.100.254 instead of 192.168.100.1), preempt was not enabled (both routers could claim active), and priority was default (100). Additionally, interface tracking was missing to decrement priority if the upstream link failed. The solution consists of four commands: 'standby 100 ip 192.168.100.1' to set the correct virtual IP, 'standby 100 priority 110' to make R1 the active router, 'standby 100 preempt' to allow R1 to reclaim active role after recovery, and 'standby 100 track GigabitEthernet0/1 20' to reduce priority by 20 if that interface goes down.

Exam trap

Watch out for three common HSRP pitfalls: (1) virtual IP must match the configured gateway, (2) preempt is required for a router to reclaim active role after recovery, and (3) priority must be higher than the peer to be preferred. Also, remember that interface tracking decrements priority, so the tracked interface must be specified correctly.

Why the other options are wrong

B

The virtual IP address is wrong; it should be 192.168.100.1, not 192.168.100.254.

C

Priority must be higher than the default (100) to ensure R1 becomes the active router; 110 is required.

D

Preempt is required to allow R1 to reclaim the active role when its priority becomes higher again after a failure.

20
MCQmedium

What problem do first-hop redundancy protocols such as HSRP solve?

A.They prevent duplicate MAC addresses on a LAN
B.They provide a backup default gateway for end hosts
C.They replace spanning tree on switched networks
D.They encrypt traffic between users and the default gateway
AnswerB

Correct. FHRPs provide gateway redundancy for hosts.

Why this answer

First-hop redundancy protocols allow hosts to use a virtual default gateway that can remain available even if one physical router fails.

Exam trap

A frequent exam trap is mistaking HSRP for a protocol that prevents duplicate MAC addresses or replaces Spanning Tree Protocol (STP). While STP prevents Layer 2 loops by blocking redundant paths, HSRP operates at Layer 3 to provide gateway redundancy. Another trap is assuming HSRP encrypts traffic between hosts and routers, which it does not.

Candidates might also confuse HSRP with routing protocols like OSPF or EIGRP, but HSRP only manages default gateway availability, not routing decisions. Understanding these distinctions is crucial to avoid selecting incorrect options that describe unrelated network functions.

Why the other options are wrong

A

Option A incorrectly states that HSRP prevents duplicate MAC addresses on a LAN. Duplicate MAC address prevention is a function of Layer 2 protocols and network design, not HSRP, which operates at Layer 3 to provide gateway redundancy.

C

Option C incorrectly claims that HSRP replaces Spanning Tree Protocol (STP). STP prevents Layer 2 switching loops, while HSRP provides Layer 3 gateway redundancy; they serve distinct purposes and coexist in networks.

D

Option D incorrectly suggests that HSRP encrypts traffic between users and the default gateway. HSRP does not provide encryption; it only manages gateway availability and failover.

21
Multi-Selectmedium

Which TWO statements are true regarding HSRP active/standby election, priority, and preemption?

Select 2 answers
A.The router with the highest priority becomes the active router.
B.The router with the lowest IP address in the standby group becomes the active router.
C.HSRP priority can be configured from 0 to 100, with 100 being the highest.
D.Preemption is enabled by default on all HSRP interfaces.
E.If preemption is enabled, a router with a higher priority can take over the active role from a router with a lower priority that is already active.
F.The standby router uses a priority of 0 to indicate it will never become active.
AnswersA, E

HSRP uses a priority value (0–255, default 100) to determine the active router; the highest priority wins.

Why this answer

In HSRP, the router with the highest priority wins the election to become the active router (A correct). If preemption is enabled, a router with a higher priority can take over the active role from a lower-priority active router (E correct). Option B is incorrect: when priorities are equal, the router with the highest IP address in the standby group is chosen, not the lowest.

Option C is incorrect: HSRP priority ranges from 0 to 255, not 0 to 100. Option D is incorrect: preemption is disabled by default on all HSRP interfaces. Option F is incorrect: a priority of 0 is used to indicate that the router will not participate in the election or will immediately give up the active role, but it does not mean it will never become active; in fact, it can be configured to force a new election.

Exam trap

Cisco often tests the exact priority range (0–255) and the tiebreaker rule (highest IP, not lowest), leading candidates to confuse HSRP with VRRP or GLBP, or to misremember the priority scale.

Why the other options are wrong

B

This describes a different mechanism (e.g., VRRP uses IP address as a tiebreaker only after priority).

C

The range is 0–255, not 0–100.

D

Preemption is not a default behavior.

F

Priority 0 is a special value, not the normal standby priority.

22
Drag & Dropmedium

Drag and drop the following steps into the correct order to configure HSRP on a Cisco IOS-XE router, including priority, preempt, virtual IP, and then verify the active/standby election and failover process.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps
Order
1Step 1
2Step 2
3Step 3
4Step 4

Why this order

First, the interface is configured. Then the virtual IP is set, followed by priority and preempt. Verification confirms the election, and failover testing demonstrates the preempt mechanism works.

Exam trap

The exam trap is that candidates often confuse the order of priority and preempt, or try to configure HSRP parameters before the interface is ready. Remember: interface first, then virtual IP, then priority, then preempt. Verification and testing come last.

23
PBQhard

You are connected to R1 via the console. R1 and R2 are running HSRP for the VLAN 10 subnet 192.168.10.0/24. Currently both routers are active for group 10, causing instability. Configure R1 so that it becomes the active router when its G0/0 interface is up, and R2 takes over only if R1's G0/0 fails. Also correct the virtual IP address to 192.168.10.1. Verify with show standby brief.

Hints

  • Check the virtual IP address on R1; it does not match the required 192.168.10.1.
  • Both routers are active because preempt is missing on R2; ensure R1 can reclaim active role.
  • Use the track interface feature to reduce priority on R1 if its G0/0 goes down.
A.On R1: interface GigabitEthernet0/0, standby 10 ip 192.168.10.1, standby 10 preempt, standby 10 track GigabitEthernet0/0 decrement 60. On R2: standby 10 preempt.
B.On R1: interface GigabitEthernet0/0, standby 10 ip 192.168.10.1, standby 10 preempt, standby 10 track GigabitEthernet0/0 decrement 10. On R2: no additional configuration.
C.On R1: interface GigabitEthernet0/0, standby 10 ip 192.168.10.1, standby 10 preempt, standby 10 track GigabitEthernet0/0 decrement 60. On R2: no additional configuration.
D.On R1: interface GigabitEthernet0/0, standby 10 ip 192.168.10.254, standby 10 preempt, standby 10 track GigabitEthernet0/0 decrement 60. On R2: standby 10 preempt.
AnswerA
solution
! R1
configure terminal
interface GigabitEthernet0/0
no standby 10 ip 192.168.10.254
standby 10 ip 192.168.10.1
standby 10 track GigabitEthernet0/0 decrement 60
end

Why this answer

The dual-active state was caused by R1 having an incorrect virtual IP address (192.168.10.254 instead of 192.168.10.1), making it active for a different HSRP group. Correcting the VIP to 192.168.10.1 on R1 aligns both routers to the same group. Enabling preempt on R2 (and it should already be enabled on R1) allows R1 to reclaim the active role after the VIP correction.

Additionally, interface tracking with a decrement of 60 ensures that if R1's G0/0 fails, R1's priority drops below 100, allowing R2 to take over.

Exam trap

Remember that preempt must be enabled on both HSRP routers for proper failover and reclamation. Also, interface tracking decrement must be large enough to drop priority below the standby router's priority. Finally, always verify the virtual IP address matches the required gateway.

Why the other options are wrong

B

The decrement value of 10 does not cause R1's priority to drop below R2's default priority of 100 (assuming R1 starts at 100, it becomes 90, still above R2's 100? Actually 90 < 100, but without preempt on R2, R2 won't become active. The main error is missing preempt on R2 and insufficient decrement to ensure R2 takes over.

C

Missing preempt on R2 prevents R1 from becoming active again after a failure, which violates the requirement that R1 should be active when its interface is up.

D

The virtual IP is not corrected to 192.168.10.1; it stays at 192.168.10.254, which is not the correct gateway address for the subnet.

24
MCQhard

An engineer is troubleshooting a first-hop redundancy issue on a subnet where two routers, R1 and R2, are configured with HSRP. Hosts on the VLAN are intermittently losing connectivity to the default gateway. The engineer runs the `show standby` command on R1 and sees this output: ``` Vlan1 - Group 10 State is Active 2 state changes, last state change 00:00:45 Virtual IP address is 192.168.1.254 Active virtual MAC address is 0000.0c07.ac0a Local virtual MAC address is 0000.0c07.ac0a (v1 default) Hello time 3 sec, hold time 10 sec Next hello sent in 1.2 secs Preemption enabled Active router is local Standby router is 192.168.1.1, priority 200 (configured 200) Priority 150 (configured 150) Group name is "hsrp-Vlan1-10" (default) ``` What is the most likely root cause of the problem?

A.Increase the priority on R1 above 150.
B.Change the HSRP group number on R1 to 20.
C.Disable preemption on R1.
D.Increase the hello timer on R1 to 10 seconds.
AnswerA

R1's priority of 100 is lower than the active router's 150. With preemption enabled, R1 will only become active if its priority is higher. Raising R1's priority above 150 allows it to preempt and become the active router, resolving the instability.

Why this answer

The output shows R1 is in the 'Active' state with priority 150, but the 'Standby' router (R2) has a higher priority of 200. With preemption enabled (as indicated by 'Preempt' in the output), R2 will preempt R1 and become the active router, causing intermittent connectivity as the active gateway flips. Increasing R1's priority above 150 (e.g., to 210) ensures R1 remains the active router, stabilizing the default gateway.

Exam trap

Cisco often tests the misconception that increasing the hello timer or disabling preemption on the local router solves a preemption issue caused by a higher-priority remote router, when in fact the fix is to either raise the local priority or disable preemption on the higher-priority neighbor.

Why the other options are wrong

B

This would break the HSRP relationship entirely, not fix the priority issue.

C

Preemption is not the cause; it is actually desired to allow a higher-priority router to take over.

D

This does not address the priority mismatch and could worsen convergence time.

25
PBQhard

You are connected to R1. The network uses HSRP to provide first-hop redundancy for VLAN 10 clients. R1 should be the active router with a priority of 150, preempt enabled, and should track interface GigabitEthernet0/1 (decrement priority by 20 if it goes down). The virtual IP is 192.168.10.254. Currently, both routers are active for the same group. Fix the configuration on R1 so that it becomes the active router and preempts when possible.

Network Topology
Gi0/0192.168.10.1/24Gi0/0192.168.10.2/24Gi0/110.0.0.1/30R2switchR1WANISP

Hints

  • Both routers show as active because preempt is missing and priority is equal (default 100).
  • You need to increase the priority and enable preempt on R1.
  • Use the 'track' command to decrement priority if the uplink fails.
A.interface Vlan10\n standby 10 ip 192.168.10.254\n standby 10 priority 150\n standby 10 preempt\n standby 10 track GigabitEthernet0/1 20
B.interface Vlan10\n standby 10 ip 192.168.10.254\n standby 10 priority 150\n standby 10 preempt\n standby 10 track GigabitEthernet0/1 20 decrement
C.interface Vlan10\n standby 10 ip 192.168.10.254\n standby 10 priority 150\n standby 10 preempt delay 20\n standby 10 track GigabitEthernet0/1
D.interface Vlan10\n standby 10 ip 192.168.10.254\n standby 10 priority 150\n standby 10 preempt\n standby 10 track GigabitEthernet0/1 20 priority
AnswerA
solution
! R1
interface GigabitEthernet0/0
standby 10 priority 150
standby 10 preempt
standby 10 track GigabitEthernet0/1 20

Why this answer

Both routers are active for HSRP group 10 because the virtual IP address is not configured or is mismatched, causing a split-brain scenario. The correct fix must include setting the virtual IP with 'standby 10 ip 192.168.10.254', raising R1's priority to 150, enabling preempt, and tracking GigabitEthernet0/1 with a decrement of 20. Option A supplies all required commands with proper syntax.

Other options either omit the vital IP configuration or have invalid keywords like 'decrement' or 'preempt delay'.

Exam trap

Be careful with the exact syntax of HSRP commands. The 'standby track' command does not include the words 'decrement' or 'priority'. Also, 'preempt delay' is for delaying preemption, not for tracking.

Ensure you specify the decrement value correctly.

Why the other options are wrong

B

The specific factual error is that 'decrement' is not a valid keyword in the standby track command. The decrement value is specified directly after the interface.

C

The specific factual error is that 'preempt delay' is not the correct way to configure tracking. Tracking is done with the 'standby track' command, and the decrement value must be specified.

D

The specific factual error is that 'priority' is not a valid keyword in the standby track command. The decrement value is specified directly after the interface.

26
Drag & Dropmedium

Drag and drop the following steps into the correct order to configure HSRP on an interface and verify the active/standby election process, including failover and verification.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps
Order
1Step 1
2Step 2
3Step 3
4Step 4

Why this order

The correct order for HSRP configuration is step A: first enter interface configuration mode, set HSRP version, configure the virtual IP, optionally set priority to influence active router selection, enable preempt to allow the higher-priority router to reclaim active role, and verify with 'show standby' to see real-time roles and states. Step B is incorrect because HSRP is configured per interface, not via global configuration and VLAN creation; the virtual IP is set on the interface, not on a VLAN. Step C is wrong because priority should be set after entering interface configuration mode, not before, and verification should use 'show standby' not 'show running-config'.

Step D is invalid because there is no global 'router hsrp' command; HSRP configuration is done directly on the interface, and 'debug standby' is not a reliable verification command. 'show standby' is the standard command to verify active/standby status.

Exam trap

Candidates often confuse the order of HSRP configuration steps or think HSRP requires a global configuration mode like routing protocols. Remember: HSRP is configured per interface, and verification uses 'show standby' to see real-time roles.

27
PBQhard

You are connected to R1, which is part of an HSRP group with R2. The current configuration has both routers active for the same virtual IP, causing instability. Configure R1 with a higher priority, enable preempt, and set the virtual IP to 192.168.1.1. Also, configure interface tracking so that if R1's G0/1 goes down, its priority decreases by 15. Verify with 'show standby brief'.

Network Topology
G0/0192.168.1.2/24G0/0192.168.1.3/24switchR1R2

Hints

  • Check the current virtual IP address — it may not match the required one.
  • Both routers have the same priority and preempt is missing, causing both to be Active.
  • Use 'standby 1 track' to monitor an uplink interface.
A.On R1, configure: standby 1 priority 110, standby 1 preempt, standby 1 ip 192.168.1.1, and standby 1 track GigabitEthernet0/1 15
B.On R1, configure: standby 1 priority 110, standby 1 preempt, standby 1 ip 192.168.1.254, and standby 1 track GigabitEthernet0/1 15
C.On R1, configure: standby 1 priority 110, standby 1 preempt, standby 1 ip 192.168.1.1, and standby 1 track GigabitEthernet0/1 10
D.On R1, configure: standby 1 priority 100, standby 1 preempt, standby 1 ip 192.168.1.1, and standby 1 track GigabitEthernet0/1 15
AnswerA
solution
! R1
interface GigabitEthernet0/0
standby 1 ip 192.168.1.1
standby 1 priority 110
standby 1 preempt
standby 1 track GigabitEthernet0/1 15
end

Why this answer

The current configuration does not cause both routers to be Active; rather, R2 is likely the Active router because both have default priority (100) and no preempt, so R2 with the higher interface IP (192.168.1.3) wins the election. To ensure R1 becomes Active, set its priority to 110 and enable preempt. Also correct the virtual IP to 192.168.1.1.

Interface tracking on G0/1 with a decrement of 15 ensures R1 yields to R2 if its tracked interface fails. Option A correctly applies all these settings. Option B uses the wrong virtual IP (192.168.1.254).

Option C uses the wrong decrement value (10). Option D uses default priority (100), which will not make R1 the Active router if R2 retains default priority and higher IP.

Exam trap

Watch out for the virtual IP address and the exact decrement value. Also, remember that preempt alone does not make a router Active if its priority is not higher than the current Active router.

Why the other options are wrong

B

The virtual IP address is wrong; it should be 192.168.1.1, not 192.168.1.254.

C

The decrement value is 10 instead of the required 15.

D

The priority is not increased; it remains at the default 100, so R1 may not become the Active router.

Ready to test yourself?

Try a timed practice session using only Hsrp questions.