CCNA IPV6 Questions

75 of 91 questions · Page 1/2 · IPV6 topic · Answers revealed

1
PBQhard

You are connected to R1. Configure IPv4 and IPv6 addressing on R1's GigabitEthernet0/0 and GigabitEthernet0/1 interfaces so that R1 can ping both R2's IPv4 address (203.0.113.2) and R2's IPv6 address (2001:db8:1::2). The current configuration has an incorrect subnet mask on G0/0, missing default gateway, and R1's G0/1 has a duplicate IPv4 address with R3. Also, use EUI-64 for IPv6 on G0/0 and static IPv6 assignment on G0/1. Ensure all issues are resolved and connectivity verified.

Network Topology
G0/0203.0.113.1/30G0/0203.0.113.2/30linkG0/1192.168.1.254/24G0/0192.168.1.1/24R2R1switchR3

Hints

  • Check the subnet mask on G0/0; it should match R2's /30.
  • G0/1's IPv4 address conflicts with R3; use an unused address like .254.
  • Enable IPv6 globally with 'ipv6 unicast-routing' before configuring interface IPv6 addresses.
A.Change G0/0 subnet mask to 255.255.255.252, add default gateway 203.0.113.2, change G0/1 IPv4 to 192.168.1.254, enable IPv6 routing, configure G0/0 with ipv6 address 2001:db8:1::/64 eui-64, and G0/1 with ipv6 address 2001:db8:2::1/64.
B.Change G0/0 subnet mask to 255.255.255.0, add default gateway 203.0.113.1, change G0/1 IPv4 to 192.168.1.254, enable IPv6 routing, configure G0/0 with ipv6 address 2001:db8:1::1/64, and G0/1 with ipv6 address 2001:db8:2::1/64.
C.Change G0/0 subnet mask to 255.255.255.252, add default gateway 203.0.113.2, change G0/1 IPv4 to 192.168.1.1, enable IPv6 routing, configure G0/0 with ipv6 address 2001:db8:1::/64 eui-64, and G0/1 with ipv6 address 2001:db8:2::1/64.
D.Change G0/0 subnet mask to 255.255.255.252, add default gateway 203.0.113.2, change G0/1 IPv4 to 192.168.1.254, enable IPv6 routing, configure G0/0 with ipv6 address 2001:db8:1::1/64, and G0/1 with ipv6 address 2001:db8:2::/64 eui-64.
AnswerA
solution
! R1
configure terminal
interface gigabitethernet0/0
ip address 203.0.113.1 255.255.255.252
ipv6 address 2001:db8:1::/64 eui-64
exit
interface gigabitethernet0/1
ip address 192.168.1.254 255.255.255.0
ipv6 address 2001:db8:2::1/64
exit
ip route 0.0.0.0 0.0.0.0 203.0.113.2
end

Why this answer

The subnet mask on G0/0 was incorrectly set to /24 instead of /30. While a /24 mask on 203.0.113.1 would include 203.0.113.2 in the same subnet from R1's perspective, the mismatch with R2's /30 mask leads to inconsistent subnet definitions and potential ARP or routing issues. Additionally, no default gateway was configured, so traffic to remote networks would fail.

On G0/1, the IPv4 address 192.168.1.1 was already used by R3, causing a duplicate IP conflict. IPv6 was not configured on either interface. The fix involved correcting the subnet mask on G0/0 to 255.255.255.252, adding a default gateway (203.0.113.2), assigning a unique IPv4 address to G0/1 (192.168.1.254), enabling IPv6 routing globally with `ipv6 unicast-routing`, configuring EUI-64 on G0/0 (`ipv6 address 2001:db8:1::/64 eui-64`), and static IPv6 on G0/1 (`ipv6 address 2001:db8:2::1/64`).

Exam trap

Watch out for subnet mask mismatches (e.g., /24 vs /30) and duplicate IP addresses. Also, note the specific IPv6 addressing requirements: EUI-64 on one interface and static on the other. Don't assume a default gateway can be any IP in the subnet; it must be the neighbor's IP.

Why the other options are wrong

B

The subnet mask /24 is too large, causing a mismatch with R2's /30; the default gateway must be R2's IP (203.0.113.2); EUI-64 is not used on G0/0.

C

The duplicate IPv4 address on G0/1 is not resolved; it still uses 192.168.1.1 which is already assigned to R3.

D

EUI-64 is required on G0/0, not G0/1; static IPv6 is required on G0/1, not G0/0.

2
PBQhard

You are connected to R1 via console. R1 and R2 are directly connected via their GigabitEthernet0/0 interfaces. Configure OSPFv3 for IPv6 on both routers so that the loopback0 interface on R2 (with IPv6 address 2001:db8:acad:2::1/64) is reachable from R1. Enable IPv6 unicast routing, enable OSPFv3 on the appropriate interfaces, and verify the neighbor adjacency and routing table. (Note: R2 already has OSPFv3 configured and is waiting for R1 to complete its configuration.)

Hints

  • OSPFv3 uses a separate process from OSPFv2; you must create the OSPFv3 process with 'ipv6 router ospf <process-id>'.
  • The router-id must be configured manually (e.g., 1.1.1.1) because there are no IPv4 addresses on R1.
  • OSPFv3 is enabled on an interface using 'ipv6 ospf <process-id> area <area-id>'.
A.Enable IPv6 unicast routing, configure OSPFv3 process with router-id, enable OSPFv3 on GigabitEthernet0/0 in area 0, and verify neighbor and route.
B.Enable IPv6 unicast routing, configure OSPFv2 process with router-id, enable OSPFv2 on GigabitEthernet0/0 in area 0, and verify neighbor and route.
C.Enable IPv6 unicast routing, configure OSPFv3 process without a router-id, enable OSPFv3 on GigabitEthernet0/0 in area 0, and verify neighbor and route.
D.Enable IPv6 unicast routing, configure OSPFv3 process with router-id, enable OSPFv3 on GigabitEthernet0/0 in area 0, but do not verify neighbor or route.
AnswerA
solution
! R1
ipv6 unicast-routing
ipv6 router ospf 1
router-id 1.1.1.1
exit
interface gigabitethernet0/0
ipv6 ospf 1 area 0
end

Why this answer

The issue is that OSPFv3 process is not enabled on R1. To fix, first ensure IPv6 unicast routing is enabled (already done). Then configure OSPFv3 routing process with a process ID (e.g., 1) and router-id using the `ipv6 router ospf 1` command and `router-id` command.

Then enable OSPFv3 on the GigabitEthernet0/0 interface with `ipv6 ospf 1 area 0`. Finally, verify with `show ospfv3 neighbor` to see R2's router ID (e.g., 2.2.2.2) and `show ipv6 route ospf` to see the route to 2001:db8:acad:2::/64.

Exam trap

A common trap is confusing OSPFv2 and OSPFv3. Remember that OSPFv3 is for IPv6 and requires a router-id. Also, do not skip verification steps; they are often required in exam scenarios.

Why the other options are wrong

B

OSPFv2 supports only IPv4; OSPFv3 is required for IPv6 routing.

C

OSPFv3 uses a 32-bit router-id, which must be manually configured or derived from an IPv4 address; without it, the process cannot operate.

D

Verification commands like 'show ospfv3 neighbor' and 'show ipv6 route ospf' are necessary to ensure OSPFv3 is functioning correctly.

3
Multi-Selectmedium

Which TWO statements are true about IPv6 link-local addresses?

Select 2 answers
A.They are automatically configured on all IPv6-enabled interfaces.
B.They are routable across the entire IPv6 internet.
C.They always use the EUI-64 format for the interface ID.
D.They are used as the default gateway address for IPv6 hosts.
E.They are identified by the prefix fe80::/10.
AnswersA, E

IPv6-enabled interfaces automatically generate a link-local address, even if no other IPv6 address is configured.

Why this answer

Option A is correct because IPv6 link-local addresses (fe80::/10) are automatically generated on every IPv6-enabled interface using Stateless Address Autoconfiguration (SLAAC) as defined in RFC 4862. This ensures that each interface has a unique local address for neighbor discovery and other link-local operations without requiring manual configuration or a DHCPv6 server.

Exam trap

Cisco often tests the misconception that link-local addresses are routable or that they always use EUI-64, when in fact they are strictly link-scoped and can use privacy extensions to randomize the interface ID.

Why the other options are wrong

B

Link-local addresses are not routable; they are confined to a single link or network segment. Routers will not forward packets with a link-local source or destination address beyond the local subnet.

C

While EUI-64 is one method for generating the interface ID, link-local addresses can also use randomly generated identifiers (privacy extensions) or be manually configured. The statement that they always use EUI-64 is incorrect.

D

The default gateway for IPv6 hosts is typically a global unicast or unique local address, not a link-local address. While routers may send Router Advertisements with a link-local source, the default gateway address learned by hosts is the router's link-local address, but the host uses that link-local address as the next-hop, not as the default gateway address itself. The statement is misleading because the default gateway is often the link-local address of the router, but the host uses it as the next-hop, not as a routable address.

4
PBQhard

You are connected to R1 via console. R1 and R2 are directly connected via GigabitEthernet0/0. Your task is to configure IPv4 and IPv6 addressing on both routers so that they can ping each other's IPv4 and IPv6 addresses. The current configuration has intentional faults: R1's IPv4 subnet mask is incorrect, R2 is missing its default gateway, and R1's IPv6 address uses EUI-64 but is not working due to a duplicate IP. Correct the IPv4 mask on R1, assign a static IPv6 address on R2, and ensure both routers can reach each other.

Network Topology
G0/0192.0.2.1/30G0/0192.0.2.2/30linkR1R2

Hints

  • Check the subnet mask on R1's G0/0 — the link between two routers typically uses a /30 mask.
  • R2 has no IPv6 address configured — assign one manually.
  • R2 cannot reach R1's IPv4 address because they are on different subnets and R2 has no default gateway.
A.On R1, change the IPv4 mask to 255.255.255.252; on R2, assign IPv4 address 192.0.2.2/30 and IPv6 address 2001:db8:1::2/64; configure a default route on R2 pointing to 192.0.2.1.
B.On R1, change the IPv4 mask to 255.255.255.0; on R2, assign IPv4 address 192.0.2.2/24 and IPv6 address 2001:db8:1::2/64; no default route needed.
C.On R1, change the IPv4 mask to 255.255.255.252; on R2, assign IPv4 address 192.0.2.2/28 and IPv6 address 2001:db8:1::2/64; configure a default route on R2 pointing to 192.0.2.1.
D.On R1, change the IPv4 mask to 255.255.255.252; on R2, assign IPv4 address 192.0.2.2/30 and IPv6 address 2001:db8:1::1/64; configure a default route on R2 pointing to 192.0.2.1.
AnswerA
solution
! R1
configure terminal
interface GigabitEthernet0/0
ip address 192.0.2.1 255.255.255.252
end

! R2
configure terminal
interface GigabitEthernet0/0
ip address 192.0.2.2 255.255.255.252
ipv6 address 2001:db8:1::2/64
exit
ip route 0.0.0.0 0.0.0.0 192.0.2.1
end

Why this answer

R1's IPv4 mask was /28, but the correct mask for the link should be /30 to avoid overlapping subnets (192.0.2.0/28 includes both .1 and .14, but they are on the same link). R2 had no IPv6 address configured. Additionally, R1's EUI-64 address was valid but R2 needed a static IPv6 address.

The solution: on R1, change the mask to 255.255.255.252; on R2, assign an IPv4 address with mask /30 and a static IPv6 address 2001:db8:1::2/64; also add a default route on R2 pointing to 192.0.2.1 for IPv4. After these changes, both routers can ping each other's IPv4 and IPv6 addresses.

Exam trap

Watch out for subnet mask mismatches and duplicate IPv6 addresses. Always use /30 for point-to-point links and ensure each router has a unique IPv6 address on the same link.

Why the other options are wrong

B

The specific factual error: Using a /24 mask on a point-to-point link wastes addresses and may cause subnet overlap; also, R2 needs a default route to reach R1's IPv4 address if the mask is /30, but with /24 they are in the same subnet so no default route is needed, but the mask is still wrong.

C

The specific factual error: R2's IPv4 mask must match R1's mask to ensure both routers agree on the subnet boundary. Using /28 on R2 while R1 uses /30 creates a mismatch.

D

The specific factual error: Assigning the same IPv6 address to both routers causes a duplicate address conflict, preventing communication.

5
MCQhard

An engineer is troubleshooting an OSPFv3 adjacency issue between two routers R1 and R2 connected over a serial link. The link is up/up on both sides, and IPv6 is enabled on the interfaces. However, the 'show ipv6 ospf neighbor' command shows no neighbors. The engineer checks the OSPFv3 configuration. What is the most likely cause of the missing adjacency?

A.The serial interface on R2 is administratively down.
B.OSPFv3 authentication is configured on R1 but not on R2.
C.The IPv6 address on R2 is in a different subnet than R1.
D.The OSPFv3 router-id is not configured on R2.
AnswerB

R1 has IPsec authentication under router ospfv3, but R2 does not. This mismatch prevents adjacency formation.

Why this answer

Option B is correct because OSPFv3 uses IPsec for authentication, unlike OSPFv2 which uses plaintext or MD5 authentication. If authentication is configured on one router but not the other, the OSPFv3 Hello packets will be dropped, preventing neighbor adjacency from forming. The 'show ipv6 ospf neighbor' command will show no neighbors because the routers cannot exchange Hello packets successfully.

Exam trap

Cisco often tests the misconception that OSPFv3 requires matching subnets (like OSPFv2) or that authentication is optional, when in fact OSPFv3 uses IPsec and any mismatch breaks adjacency silently.

Why the other options are wrong

A

The question states the serial link is up/up on both sides, meaning the interface is not administratively down. An administratively down interface would show as 'administratively down' in the interface status, not 'up/up'.

C

Both interfaces have IPv6 addresses in the 2001:DB8:1:1::/64 subnet, so the subnet matches. OSPFv3 does not require interfaces to be in the same subnet for adjacency, but it does require link-local addresses to be reachable. However, the given addresses are global unicast, and the subnet match is not the issue here.

D

The router-id is configured on R2 as 2.2.2.2, as stated in the existing explanation. OSPFv3 requires a router-id, and it is present, so this is not the cause.

6
Drag & Dropmedium

Drag and drop the following steps into the correct order to configure IPv4 and IPv6 static routes, a default route, and a floating static route with higher administrative distance, then verify the routing tables.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps
Order
1Step 1
2Step 2
3Step 3
4Step 4

Why this order

The order first configures specific static routes, then the default route and floating static route (which can be done in any order but typically after specific routes), and finally verification. The floating static route is configured with a higher AD so it is less preferred.

Exam trap

Do not confuse the order of configuration with the order of preference. Specific routes should be configured first, then the default route and floating static route can be configured in any order (though typically default is configured before floating static). Verification is always the last step.

7
MCQhard

What is the main purpose of this configuration? ipv6 route 2001:db8:100::/64 GigabitEthernet0/0

A.It creates a specific IPv6 static route to 2001:db8:100::/64 out GigabitEthernet0/0.
B.It enables OSPFv3 on GigabitEthernet0/0.
C.It creates an IPv6 default route.
D.It converts the interface into a tunnel.
AnswerA

This is correct because the command defines a manual route to that destination prefix.

Why this answer

This configuration creates an IPv6 static route to a specific destination prefix through the named outgoing interface. In practical terms, the router is being told exactly how to reach that remote IPv6 network. This is not a default route and not a dynamic-routing statement. It is a manually defined path to one destination prefix.

The key concept is recognizing the difference between a specific static route and a default route.

Exam trap

A frequent exam trap is mistaking the static route command for enabling a routing protocol such as OSPFv3 or assuming it creates a default route. Candidates may also confuse static routes with tunnel interfaces. The command shown explicitly configures a static route to a specific IPv6 prefix via an interface, not a dynamic routing process or a default (::/0) route.

Misreading the prefix or interface can lead to selecting incorrect answers. Recognizing that static routes are manual, precise entries that do not activate protocols or tunnels is essential to avoid this trap.

Why the other options are wrong

B

This option is incorrect because the command shown is a static route configuration, not a command to enable OSPFv3 on an interface. OSPFv3 requires separate routing protocol configuration commands.

C

This option is incorrect because the prefix specified is a specific network (2001:db8:100::/64), not the default IPv6 route (::/0). Therefore, it does not create a default route.

D

This option is incorrect because static route commands do not convert interfaces into tunnels. Tunnel interfaces require explicit tunnel configuration commands, which are not present here.

8
MCQhard

R1 is an IPv6-only branch router. The administrator wants all unknown IPv6 destinations to be sent to the upstream router at 2001:db8:ff::1. Which command best achieves that goal?

A.ipv6 route ::/0 2001:db8:ff::1
B.ip route 0.0.0.0 0.0.0.0 2001:db8:ff::1
C.ipv6 route 2001:db8:ff::/64 ::1
D.ipv6 default-gateway 2001:db8:ff::1
AnswerA

This is correct because ::/0 is the IPv6 default route and the next hop is the upstream router.

Why this answer

The correct configuration is an IPv6 default static route pointing to the upstream next hop. In practical terms, this is the IPv6 version of a route of last resort. The router does not need specific entries for every remote IPv6 network if all unknown traffic should go to the upstream device.

The key distinction is that IPv6 static routing uses IPv6 syntax and the double-colon default prefix representation. This is a foundational branch-routing concept for IPv6 deployments.

Exam trap

A common exam trap is confusing IPv4 and IPv6 routing commands by attempting to use the ip route command with an IPv6 next-hop address. This is invalid because ip route is strictly for IPv4 static routes. Another trap is using ipv6 default-gateway, which is not a valid static routing command and does not install a route in the routing table.

These mistakes cause the router to drop unknown IPv6 traffic since no default route is installed. Candidates must recognize that IPv6 static routes require the ipv6 route command with the ::/0 prefix for default routing.

Why the other options are wrong

B

This option is incorrect because it uses the IPv4 static route syntax (ip route) with an IPv6 next-hop address, which is invalid and will not configure a proper IPv6 route.

C

This command creates a specific static route to the 2001:db8:ff::/64 prefix with a next hop of ::1, which is not a default route and does not forward all unknown IPv6 traffic.

D

The ipv6 default-gateway command is not used for static routing configuration and does not install a default route in the routing table, making it ineffective for forwarding unknown IPv6 destinations.

9
PBQhard

You are connected to R1 via console. R1 must forward traffic to the 203.0.113.0/24 and 2001:db8:1::/48 networks through R2 (10.0.0.2/30, 2001:db8:ff::2/64). The primary path must use a next-hop of 10.0.0.2 for IPv4 and 2001:db8:ff::2 for IPv6. Additionally, configure a floating static default route for IPv4 that uses R3 (192.0.2.2/30) as a backup only when the primary path fails. The current configuration has errors: the IPv4 static route points to a wrong next-hop (10.0.0.5) and the primary default route is missing, causing the floating route (AD 100) to become active instead of serving as a backup. Fix these issues so that both primary and backup routes work correctly.

Network Topology
G0/010.0.0.1/30G0/010.0.0.2/30linkG0/1192.0.2.1/30G0/0192.0.2.2/30linkR1R2R3

Hints

  • Check the directly connected subnet on G0/0 — what IPs are valid?
  • A floating static route must have a higher AD than the primary route.
  • The primary default route is missing — add it with a lower AD.
A.Change the next-hop of the static route to 203.0.113.0/24 from 10.0.0.5 to 10.0.0.2, and add a default route 0.0.0.0/0 via 10.0.0.2 with AD 1. Keep the floating default route 0.0.0.0/0 via 192.0.2.2 with AD 100.
B.Change the next-hop of the static route to 203.0.113.0/24 from 10.0.0.5 to 10.0.0.2, and change the administrative distance of the floating default route from 100 to 1 so it becomes the primary default route.
C.Change the next-hop of the static route to 203.0.113.0/24 from 10.0.0.5 to 10.0.0.2, and change the administrative distance of the floating default route from 100 to 255 so it is never used.
D.Change the next-hop of the static route to 203.0.113.0/24 from 10.0.0.5 to 10.0.0.2, and remove the floating default route because it is unnecessary.
AnswerA
solution
! R1
no ip route 203.0.113.0 255.255.255.0 10.0.0.5
ip route 203.0.113.0 255.255.255.0 10.0.0.2
ip route 0.0.0.0 0.0.0.0 10.0.0.2

Why this answer

The IPv4 static route to 203.0.113.0/24 used a next-hop of 10.0.0.5, which is not a directly connected interface (R1's G0/0 is 10.0.0.1/30, so only .2 is valid). This caused a recursive lookup failure. The floating static default route had AD 100, but a floating route must have an AD higher than the primary route's AD (typically 1) so it is only used when the primary fails; setting AD 100 is correct for backup, but the primary default route was missing.

The fix: change the next-hop for 203.0.113.0/24 to 10.0.0.2, and add a primary default route with AD 1 via 10.0.0.2. The floating route's AD of 100 is fine as backup. IPv6 route was correct.

Exam trap

Watch out for two common traps: (1) Static routes must use a directly connected next-hop; using an IP not on a directly connected subnet causes recursive lookup failure. (2) Floating static routes require a higher AD than the primary route; if the primary route is missing or has a higher AD, the floating route may become active prematurely or not at all.

Why the other options are wrong

B

The floating route must have a higher AD than the primary route to act as a backup; setting it to 1 would make it preferred over the primary default route, violating the requirement.

C

AD 255 is reserved for routes that are not to be installed; a floating route needs an AD higher than the primary but less than 255 to be usable as backup.

D

The floating route is required by the scenario; removing it would eliminate the backup path, which is not the intended fix.

10
PBQhard

You are connected to R1 via console. Configure OSPFv3 for IPv6 on both R1 and R2 so that the loopback0 interface on R2 (IPv6 address 2001:db8:1:2::1/64) is reachable from R1. The link between R1 and R2 uses the subnet 2001:db8:1:1::/64 with R1's G0/0 having IPv6 address 2001:db8:1:1::1/64 and R2's G0/0 having 2001:db8:1:1::2/64. OSPFv3 process ID must be 100 and all interfaces must be in area 0. After configuration, verify OSPFv3 neighbors and the IPv6 route to the loopback0 network.

Hints

  • OSPFv3 uses the 'ipv6 ospf <process-id> area <area-id>' command under each interface.
  • The loopback0 interface on R2 must also be enabled for OSPFv3 to advertise its prefix.
  • A router-id is required for OSPFv3; if not configured explicitly, the router may not form adjacency.
A.On R1: ipv6 router ospf 100, router-id 1.1.1.1, interface g0/0: ipv6 ospf 100 area 0. On R2: ipv6 router ospf 100, router-id 2.2.2.2, interface g0/0: ipv6 ospf 100 area 0, interface loopback0: ipv6 ospf 100 area 0.
B.On R1: ipv6 router ospf 100, router-id 1.1.1.1, interface g0/0: ipv6 ospf 100 area 0. On R2: ipv6 router ospf 100, router-id 2.2.2.2, interface g0/0: ipv6 ospf 100 area 0. No configuration on loopback0.
C.On R1: ipv6 router ospf 100, router-id 1.1.1.1, interface g0/0: ipv6 ospf 100 area 0. On R2: ipv6 router ospf 100, router-id 2.2.2.2, interface g0/0: ipv6 ospf 100 area 0, interface loopback0: ipv6 ospf 100 area 0, and also configure 'network 2001:db8:1:2::/64 area 0' under the OSPFv3 process.
D.On R1: ipv6 router ospf 100, router-id 1.1.1.1, interface g0/0: ipv6 ospf 100 area 0. On R2: ipv6 router ospf 100, router-id 2.2.2.2, interface g0/0: ipv6 ospf 100 area 0, interface loopback0: ipv6 ospf 100 area 0, and also configure 'passive-interface GigabitEthernet0/0' under the OSPFv3 process.
AnswerA
solution
! R1
ipv6 router ospf 100
router-id 1.1.1.1
interface GigabitEthernet0/0
ipv6 ospf 100 area 0

! R2
ipv6 router ospf 100
router-id 2.2.2.2
interface GigabitEthernet0/0
ipv6 ospf 100 area 0
interface Loopback0
ipv6 ospf 100 area 0

Why this answer

To achieve reachability to R2's loopback, OSPFv3 must be enabled on R1's and R2's G0/0 interfaces in area 0, and on R2's loopback0 so its prefix is advertised. Option A shows the minimal correct configuration. Option B omits enabling OSPF on loopback0, so the route to 2001:db8:1:2::/64 is not advertised.

Option C incorrectly uses the 'network' command, which is not supported in OSPFv3; OSPFv3 relies on interface-level 'ipv6 ospf ... area' commands. Option D adds 'passive-interface GigabitEthernet0/0', which prevents OSPF from forming a neighbor adjacency on the link, breaking the required connectivity.

Exam trap

Do not confuse OSPFv2 and OSPFv3 configuration. OSPFv3 uses only interface-level commands, and while setting a loopback as passive is safe, applying 'passive-interface' on a transit link will block neighbor adjacency.

Why the other options are wrong

B

Loopback0 is not enabled for OSPF, so its prefix is not advertised into OSPF.

C

The 'network' command is invalid in OSPFv3 for IPv6; only interface-level 'ipv6 ospf ... area' commands are used.

D

Applying 'passive-interface GigabitEthernet0/0' prevents OSPF from forming a neighbor adjacency on the link, breaking the verification of neighbor state.

11
PBQmedium

You are connected via the console to R1, a Cisco ISR 4331 router. The network uses IPv6. R1's GigabitEthernet0/0 interface has the MAC address 00:1C:0F:9A:7B:32. You need to configure the interface to use EUI-64 to form a global unicast address from the prefix 2001:DB8:CAFE:1::/64. Additionally, ensure that the interface is enabled for IPv6.

Network Topology
G0/0linkR1IPv6 Network

Hints

  • EUI-64 uses the interface MAC address to create the interface ID.
  • The command format is 'ipv6 address prefix/length eui-64'.
  • You may also need to enable IPv6 on the interface with 'ipv6 enable'.
A.R1(config-if)# ipv6 address 2001:DB8:CAFE:1:021C:0FFF:FE9A:7B32/64 eui-64 R1(config-if)# no shutdown
B.R1(config-if)# ipv6 address 2001:DB8:CAFE:1::/64 eui-64 R1(config-if)# no shutdown
C.R1(config-if)# ipv6 address 2001:DB8:CAFE:1:021C:0FFF:FE9A:7B32/64 R1(config-if)# no shutdown
D.R1(config-if)# ipv6 address 2001:DB8:CAFE:1:001C:0FFF:FE9A:7B32/64 eui-64 R1(config-if)# no shutdown
AnswerA
solution
! R1
interface GigabitEthernet0/0
ipv6 address 2001:DB8:CAFE:1::/64 eui-64
ipv6 enable

Why this answer

The EUI-64 process inserts FF:FE in the middle of the MAC address and inverts the 7th bit. Configuring the IPv6 address with the eui-64 keyword automatically generates the interface ID from the MAC address.

Exam trap

Trap: Candidates often forget the bit inversion step in EUI-64 or incorrectly use the :: abbreviation with the eui-64 keyword. Remember: EUI-64 requires the full prefix and the 7th bit of the MAC must be flipped.

Why the other options are wrong

B

The specific factual error is that the EUI-64 keyword cannot be used with the double colon (::) abbreviation; the prefix must be fully specified.

C

The specific factual error is that the command does not use the eui-64 keyword, so it does not meet the requirement to use EUI-64.

D

The specific factual error is that the 7th bit inversion was not applied; the interface ID should start with 021C, not 001C.

12
PBQhard

You are connected to R1. Configure static routes so that R1 can reach the IPv4 network 203.0.113.0/24 and the IPv6 network 2001:db8:acad:1::/64 via R2 (G0/0 10.0.0.2/30). Additionally, configure a floating static default route (IPv4) with an administrative distance of 200 via R2, and a fully specified IPv6 default route via R2. Then, verify that the IPv4 static route to 203.0.113.0/24 is correctly installed by checking the routing table. The current configuration has an incorrect next-hop causing recursive routing failure for the IPv4 static route.

Network Topology
G0/010.0.0.1/30G0/010.0.0.2/30linkG0/12001:db8:acad:2::1/64G0/12001:db8:acad:2::2/64linkR2R1R3

Hints

  • Check the next-hop IP of the IPv4 static route; it should not be the router's own interface.
  • IPv6 static routes cannot use an IPv4 next-hop; they require an IPv6 next-hop or an exit interface.
  • After correcting the recursive route, the floating default route will become active.
A.Change the IPv4 static route next-hop from 10.0.0.1 to 10.0.0.2, change the IPv6 static route next-hop from 10.0.0.2 to 2001:db8:acad:2::2, and change the IPv6 default route to use next-hop 2001:db8:acad:2::2.
B.Change the IPv4 static route next-hop from 10.0.0.1 to 10.0.0.2, and change the IPv6 static route to use exit interface G0/0 instead of a next-hop.
C.Change the IPv4 static route next-hop from 10.0.0.1 to 10.0.0.2, and change the IPv4 default route administrative distance to 1.
D.Change the IPv4 static route next-hop from 10.0.0.1 to 10.0.0.2, and change the IPv6 default route to use exit interface G0/0.
AnswerA
solution
! R1
no ip route 203.0.113.0 255.255.255.0 10.0.0.1
ip route 203.0.113.0 255.255.255.0 10.0.0.2
no ipv6 route 2001:db8:acad:1::/64 10.0.0.2
ipv6 route 2001:db8:acad:1::/64 2001:db8:acad:2::2
no ipv6 route ::/0 10.0.0.2
ipv6 route ::/0 2001:db8:acad:2::2

Why this answer

The IPv4 static route to 203.0.113.0/24 incorrectly uses next-hop 10.0.0.1 (R1's own interface) instead of 10.0.0.2 (R2), causing recursive routing failure because R1 tries to reach itself. To fix, change the next-hop to 10.0.0.2. The IPv6 static route to 2001:db8:acad:1::/64 also incorrectly uses an IPv4 next-hop; it must be a fully specified IPv6 next-hop (2001:db8:acad:2::2) or an exit interface.

The IPv4 default route has AD 200 which is correct for a floating route, but it is not shown in the routing table because there is no route to the next-hop; after fixing the recursive route, the default route will appear. The IPv6 default route uses an IPv4 next-hop which is invalid; it should be a fully specified IPv6 route (e.g., ipv6 route ::/0 2001:db8:acad:2::2).

Exam trap

A common trap is using the local interface IP as the next-hop for a static route, which causes recursive routing failure. Also, remember that IPv6 static routes require IPv6 next-hop addresses; using an IPv4 address is invalid. Floating static routes must have a higher AD than the primary route.

Why the other options are wrong

B

The IPv6 static route should use a fully specified next-hop (IPv6 address) rather than just an exit interface to avoid recursive routing failures.

C

Floating static routes require a higher administrative distance (e.g., 200) so they are only used when the primary route is unavailable.

D

A fully specified IPv6 static route includes both the exit interface and the next-hop IPv6 address to ensure proper routing.

13
PBQhard

You are connected to R1 via the console. R1 has two directly connected routers: R2 and R3. Currently, R1 cannot reach R2's loopback interface (203.0.113.1/32). Additionally, R3 is IPv6-only and must be reachable from R1 using a statically assigned global unicast address. Configure R1's interfaces and static routes so that: (1) R1 can ping R2's loopback, (2) R1 can ping R3's IPv6 address 2001:db8:acad:2::1/64, and (3) R1's IPv6 address on the link to R3 is derived using EUI-64.

Hints

  • Check the subnet of the IPv6 address on R1's G0/1; it should match R3's subnet.
  • R2's loopback is not directly connected; a static route is needed.
  • EUI-64 uses the MAC address; ensure the prefix is correct.
A.Configure R1's G0/0 with IP 192.168.1.1/24 and add a static route to 203.0.113.1/32 via 192.168.1.2. Configure R1's G0/1 with IPv6 address 2001:db8:acad:2::/64 eui-64.
B.Configure R1's G0/0 with IP 192.168.1.1/24 and add a static route to 203.0.113.0/24 via 192.168.1.2. Configure R1's G0/1 with IPv6 address 2001:db8:acad:1::/64 eui-64.
C.Configure R1's G0/0 with IP 192.168.1.1/24 and add a static route to 203.0.113.1/32 via 192.168.1.2. Configure R1's G0/1 with IPv6 address 2001:db8:acad:2::1/64.
D.Configure R1's G0/0 with IP 192.168.1.1/24 and add a static route to 203.0.113.1/32 via 192.168.1.2. Configure R1's G0/1 with IPv6 address 2001:db8:acad:1::/64 eui-64.
AnswerA
solution
! R1
interface GigabitEthernet0/1
ipv6 address 2001:db8:acad:2::/64 eui-64
exit
ip route 203.0.113.1 255.255.255.255 192.168.1.2

Why this answer

The ping to R2's loopback fails because R1's G0/0 is configured with a /24 mask, but the network should be /24 (which is correct), but the loopback is on a different subnet (203.0.113.0/24 vs 192.168.1.0/24). Actually the issue is that R1 has no route to 203.0.113.1. The solution is to add a static route on R1 pointing to R2's G0/0 IP.

For IPv6, R1's EUI-64 address is on the wrong subnet (2001:db8:acad:1::/64) but R3 is on 2001:db8:acad:2::/64. The fix is to change the IPv6 address on R1's G0/1 to 2001:db8:acad:2::/64 eui-64. Then add an IPv6 static route if needed (but R1 and R3 are directly connected, so after fixing the subnet, ping should work).

Exam trap

Watch out for subnet mismatches in IPv6 and the requirement to use EUI-64. Many candidates forget that EUI-64 requires the 'eui-64' keyword, not a manual interface ID. Also, ensure static routes point to the exact host (/32) when the destination is a loopback.

Why the other options are wrong

B

The IPv6 subnet mismatch prevents direct connectivity; R1 and R3 must be on the same subnet for a ping to work without additional routing.

C

The requirement explicitly states that the IPv6 address must be derived using EUI-64; a manually specified interface ID violates this.

D

The IPv6 subnet must be the same as R3's for direct connectivity; using a different subnet requires additional routing, which is not configured.

14
Drag & Dropmedium

Drag and drop the following steps into the correct order to configure OSPFv3 for IPv6 on a Cisco IOS-XE router.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps
Order
1Step 1
2Step 2
3Step 3
4Step 4

Why this order

To configure OSPFv3 for IPv6, first enable IPv6 routing globally with 'ipv6 unicast-routing'. Next, enter OSPFv3 configuration mode using 'router ospfv3 1' to set process parameters. Then, apply OSPFv3 on each interface with 'ipv6 ospf <process-id> area <area-id>'.

Finally, verify adjacencies with 'show ipv6 ospf neighbor'.

Exam trap

Many learners assume OSPFv3 configuration is identical to OSPFv2; while the 'router ospfv3' command is valid and often needed for router-id assignment, the primary interface-level command 'ipv6 ospf area' is where adjacency parameters are applied.

15
Drag & Dropmedium

Drag and drop the following steps into the correct order to configure an IPv4 static address on a Windows host, generate an IPv6 EUI-64 address on a Cisco router, and verify the static IP assignment on Windows.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps
Order
1Step 1
2Step 2
3Step 3
4Step 4

Why this order

The static IPv4 is configured on Windows first, then the EUI-64 IPv6 address on the router, and finally verification on Windows. This order separates host and router tasks logically.

Exam trap

Do not assume that router configuration must come first because it is more complex. The logical workflow is to configure the host first, then the router, then verify. Also, verification should always be the last step after all configurations are complete.

16
MCQmedium

What is the operational purpose of configuring the IPv6 route ::/0?

A.It provides a fallback path for unknown remote IPv6 destinations.
B.It enables OSPFv3 on the upstream interface.
C.It converts link-local addresses into global unicast addresses.
D.It summarizes all IPv6 routes into one /64 route.
AnswerA

This is correct because ::/0 defines the route of last resort for IPv6.

Why this answer

The configured route is a default route. In practical terms, it gives the router one simple next hop for any remote IPv6 destination that is not matched by a more specific entry. That is exactly what a small branch router often needs when it has a single upstream path.

This is the same design logic as an IPv4 default route, but with IPv6 syntax and addressing.

Exam trap

A frequent exam trap is mistaking the IPv6 default route (::/0) for a command that enables OSPFv3 or performs address translation. Some candidates incorrectly believe that the static route command configures OSPFv3 or converts link-local addresses to global unicast addresses. Another common error is interpreting ::/0 as a summary route with a /64 prefix, which it is not.

Understanding that ::/0 is specifically a default route that provides a fallback path for all unknown IPv6 destinations is crucial to avoid these misconceptions.

Why the other options are wrong

B

Option B is incorrect because the static route command does not enable OSPFv3. OSPFv3 requires separate configuration commands and is a dynamic routing protocol, unlike static routes.

C

Option C is incorrect because routing does not convert link-local addresses into global unicast addresses. Address types remain consistent, and routing forwards packets based on existing address formats.

D

Option D is incorrect because ::/0 is a default route covering all IPv6 addresses, not a summary route with a /64 prefix. Summarization involves aggregating multiple routes into a larger prefix, which is not the case here.

17
MCQhard

An IPv6 LAN is using SLAAC. Which message allows hosts to learn the default gateway and on-link prefix?

A.Neighbor Solicitation
B.Router Advertisement
C.DHCPv6 Solicit
D.ICMP Echo Reply
AnswerB

Correct. RA messages provide prefix and default-router information.

Why this answer

In an IPv6 LAN using SLAAC (Stateless Address Autoconfiguration), hosts learn the default gateway and on-link prefix from Router Advertisement (RA) messages sent by routers. Neighbor Solicitation (NS) is used for address resolution and Duplicate Address Detection (DAD), not for learning gateway/prefix. DHCPv6 Solicit is part of stateful DHCPv6, not SLAAC.

ICMP Echo Reply is a simple reachability test and provides no configuration information.

Exam trap

Be careful not to confuse the roles of Router Solicitation and Router Advertisement messages. Remember, solicitations are requests, while advertisements provide information.

Why the other options are wrong

A

Neighbor Solicitation (NS) messages are used for address resolution (determining the link-layer address of a neighbor) and duplicate address detection, not for advertising default gateway or prefix information.

C

DHCPv6 Solicit messages are used in stateful DHCPv6 to request configuration parameters like addresses and DNS servers, but SLAAC does not use DHCPv6 for default gateway or prefix information; those are provided by RA messages.

D

ICMP Echo Reply messages are used for ping responses and do not carry any routing or prefix information; they are not involved in neighbor discovery or address autoconfiguration.

18
Drag & Dropmedium

Drag and drop the following steps into the correct order to configure an IPv4 address on a Cisco IOS-XE router interface, then verify the configuration with a ping to a host that uses an IPv6 EUI-64 address.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps
Order
1Step 1
2Step 2
3Step 3
4Step 4

Why this order

The correct sequence is to first enter global configuration mode, then interface configuration mode, assign the IPv4 address, exit completely to enable mode, and finally ping the IPv6 host. Option B is incorrect because you cannot enter interface configuration mode before global configuration mode; you must be in global config first. Option C is incorrect because you cannot assign an IPv4 address in global configuration mode; that command must be issued in interface configuration mode.

Option D is incorrect because you cannot execute the ping command from interface configuration mode; you must exit to enable mode first.

Exam trap

The exam trap is that candidates often confuse the order of configuration modes or try to execute commands in the wrong mode. Remember: global config first, then interface config, then assign IP, then exit to enable mode for verification commands like ping.

19
PBQhard

You are connected to R1. Configure IPv4 and IPv6 addressing on interfaces G0/0 and G0/1 so that R1 can reach R2's loopback0 (198.51.100.1/32) and R2 can reach R1's loopback0 (203.0.113.1/32). The current configuration has a wrong subnet mask on R1 G0/0 and a missing default gateway on R2, causing reachability failures. Additionally, configure IPv6 using EUI-64 on R1 G0/1 and static IPv6 on R2 G0/1 to enable IPv6 ping between the two routers. All devices are routers.

Network Topology
G0/010.0.0.1/30G0/010.0.0.2/30linkG0/1192.168.1.1/24linkR1R2R2 (G0/1 192.168.2.1/24)

Hints

  • Check the subnet mask on R1 G0/0: it does not match R2's /30.
  • R2 has no route to reach R1's loopback or the 192.168.1.0/24 network; it needs a default gateway.
  • R2's IPv6 address is on a different subnet (2001:db8:2::/64) than R1's (2001:db8:1::/64); they must be on the same subnet.
A.On R1 G0/0, change subnet mask to 255.255.255.252; on R2, add ip route 0.0.0.0 0.0.0.0 10.0.0.1; for IPv6, on R2 G0/1 change address to 2001:db8:1::2/64.
B.On R1 G0/0, change subnet mask to 255.255.255.0; on R2, add ip route 0.0.0.0 0.0.0.0 10.0.0.1; for IPv6, on R2 G0/1 change address to 2001:db8:1::2/64.
C.On R1 G0/0, change subnet mask to 255.255.255.252; on R2, add ip route 0.0.0.0 0.0.0.0 10.0.0.2; for IPv6, on R2 G0/1 change address to 2001:db8:2::2/64.
D.On R1 G0/0, change subnet mask to 255.255.255.252; on R2, add ip route 0.0.0.0 0.0.0.0 10.0.0.1; for IPv6, on R2 G0/1 change address to 2001:db8:1::2/64 and on R1 G0/1 use static IPv6 instead of EUI-64.
AnswerA
solution
! R1
interface GigabitEthernet0/0
ip address 10.0.0.1 255.255.255.252
exit
interface GigabitEthernet0/1
ipv6 address 2001:db8:1::/64 eui-64
exit

! R2
interface GigabitEthernet0/1
ip address 192.168.1.2 255.255.255.0
ipv6 address 2001:db8:1::2/64
exit
ip route 0.0.0.0 0.0.0.0 10.0.0.1

Why this answer

The primary IPv4 issues are a subnet mask mismatch on the point-to-point link and a missing default gateway on R2. On R1 G0/0, the mask is /24 instead of /30; while both routers can reach each other directly, the mismatched subnet mask causes routing inconsistencies because R1 advertises the link as a /24, potentially affecting routing decisions. Fixing the mask to /30 ensures both routers agree on the subnet.

R2 lacks a route to R1's loopback and the 192.168.1.0/24 network, so a default route via 10.0.0.1 resolves reachability. For IPv6, R1 G0/1 uses EUI-64, and R2 G0/1 must be on the same subnet (2001:db8:1::/64); R2's address was incorrectly set to 2001:db8:2::2/64, so changing it to 2001:db8:1::2/64 enables IPv6 ping.

Exam trap

Watch for subnet mask mismatches on point-to-point links; both ends must use the same mask. Also, ensure default routes point to the correct next-hop IP (the neighbor's interface IP). For IPv6, both interfaces must be on the same subnet to communicate directly.

Why the other options are wrong

B

The subnet mask on R1 G0/0 should be /30 to match R2, not /24.

C

The default gateway must be the neighbor's IP address, and IPv6 subnets must match for direct communication.

D

The requirement states EUI-64 on R1 G0/1, so static is not allowed.

20
Drag & Dropmedium

Drag and drop the following steps into the correct order to configure OSPFv3 for IPv6 on a Cisco router and verify basic neighbor relationships.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps
Order
1Step 1
2Step 2
3Step 3
4Step 4
5Step 5
6Step 6

Why this order

IPv6 unicast routing must be enabled first, as OSPFv3 relies on the router being IPv6 aware. Next, the OSPFv3 process is created globally. The interface must then be IPv6-enabled to auto-generate the link-local address used by OSPFv3 for forming adjacencies.

After that, the interface is added to OSPFv3 Area 0. Finally, the 'show ospfv3 neighbor' command is used to verify that an adjacency has formed.

21
PBQhard

You are connected to R1. Configure OSPFv3 for IPv6 on R1 and R2 so that the loopback0 interface on R1 (IPv6 address 2001:db8:1::1/64) can ping the loopback0 interface on R2 (IPv6 address 2001:db8:2::1/64). The routers are connected via their GigabitEthernet0/0 interfaces using IPv6 addresses 2001:db8:12::1/64 (R1) and 2001:db8:12::2/64 (R2). OSPFv3 process ID 100 must be used, and all interfaces must be in area 0.

Network Topology
G0/02001:db8:12::1/64G0/02001:db8:12::2/64linkR1R2

Hints

  • OSPFv3 for IPv6 is configured under the 'ipv6 router ospf' process, not 'router ospf'.
  • Each interface that should participate in OSPFv3 must have the 'ipv6 ospf <process-id> area <area-id>' command.
  • Don't forget to set a router-id; otherwise the OSPFv3 process may not start.
A.R1(config)# ipv6 unicast-routing R1(config)# ipv6 router ospf 100 R1(config-rtr)# router-id 1.1.1.1 R1(config-rtr)# interface gigabitethernet0/0 R1(config-if)# ipv6 ospf 100 area 0 R1(config-if)# interface loopback0 R1(config-if)# ipv6 ospf 100 area 0 R2(config)# ipv6 unicast-routing R2(config)# ipv6 router ospf 100 R2(config-rtr)# router-id 2.2.2.2 R2(config-rtr)# interface gigabitethernet0/0 R2(config-if)# ipv6 ospf 100 area 0 R2(config-if)# interface loopback0 R2(config-if)# ipv6 ospf 100 area 0
B.R1(config)# ipv6 unicast-routing R1(config)# ipv6 router ospf 100 R1(config-rtr)# router-id 1.1.1.1 R1(config-rtr)# network 2001:db8:12::0/64 area 0 R1(config-rtr)# network 2001:db8:1::0/64 area 0 R2(config)# ipv6 unicast-routing R2(config)# ipv6 router ospf 100 R2(config-rtr)# router-id 2.2.2.2 R2(config-rtr)# network 2001:db8:12::0/64 area 0 R2(config-rtr)# network 2001:db8:2::0/64 area 0
C.R1(config)# ipv6 unicast-routing R1(config)# ipv6 router ospf 100 R1(config-rtr)# router-id 1.1.1.1 R1(config-rtr)# interface gigabitethernet0/0 R1(config-if)# ipv6 ospf 100 area 0 R2(config)# ipv6 unicast-routing R2(config)# ipv6 router ospf 100 R2(config-rtr)# router-id 2.2.2.2 R2(config-rtr)# interface gigabitethernet0/0 R2(config-if)# ipv6 ospf 100 area 0
D.R1(config)# ipv6 unicast-routing R1(config)# ipv6 router ospf 100 R1(config-rtr)# router-id 1.1.1.1 R1(config-rtr)# interface gigabitethernet0/0 R1(config-if)# ipv6 ospf 100 area 0 R1(config-if)# interface loopback0 R1(config-if)# ipv6 ospf 100 area 0 R2(config)# ipv6 unicast-routing R2(config)# ipv6 router ospf 100 R2(config-rtr)# router-id 1.1.1.1 R2(config-rtr)# interface gigabitethernet0/0 R2(config-if)# ipv6 ospf 100 area 0 R2(config-if)# interface loopback0 R2(config-if)# ipv6 ospf 100 area 0
AnswerA
solution
! R1
ipv6 router ospf 100
router-id 1.1.1.1
interface Loopback0
ipv6 ospf 100 area 0
interface GigabitEthernet0/0
ipv6 ospf 100 area 0

Why this answer

OSPFv3 for IPv6 requires enabling IPv6 unicast routing globally and configuring OSPFv3 on interfaces. The missing step was enabling OSPFv3 process 100 and assigning area 0 to the interfaces. On R1, the commands 'ipv6 router ospf 100' and 'router-id 1.1.1.1' create the OSPFv3 process, then 'ipv6 ospf 100 area 0' under each interface enables OSPFv3 on those interfaces.

Similar commands on R2 with a unique router-id complete the configuration. Verification with 'show ospfv3 neighbor' should show R2's router-id, and 'show ipv6 route ospf' should display the remote loopback network.

Exam trap

The most common trap is using OSPFv2-style 'network' commands for OSPFv3. Remember that OSPFv3 uses interface-level configuration. Also, ensure all interfaces that need to be advertised (including loopbacks) have OSPFv3 enabled, and that router-ids are unique.

Why the other options are wrong

B

The specific factual error is that OSPFv3 uses interface-level configuration, not network statements like OSPFv2 for IPv4.

C

The specific factual error is that OSPFv3 must be enabled on all interfaces that should participate in the routing process, including loopback interfaces.

D

The specific factual error is that OSPF router-ids must be unique. Using the same router-id on both routers prevents proper neighbor formation.

22
PBQmedium

You are connected to the console of R1. The network uses IPv6 with EUI-64. R1's GigabitEthernet0/0 has MAC address 0011.2233.4455. You need to configure an IPv6 address on this interface using the prefix 2001:db8:1:1::/64 with EUI-64, and ensure the interface is operational.

Network Topology
G0/0LANR1Hosts

Hints

  • The command uses 'ipv6 address' with the 'eui-64' keyword.
  • EUI-64 automatically generates the interface ID from the MAC address.
  • Verify the full IPv6 address with the link-local and global addresses.
A.ipv6 address 2001:db8:1:1:0011:22ff:fe33:4455/64 eui-64
B.ipv6 address 2001:db8:1:1::/64 eui-64
C.ipv6 address 2001:db8:1:1:0211:22ff:fe33:4455/64
D.ipv6 address 2001:db8:1:1::/64 eui-64 0011.2233.4455
AnswerB
solution
! R1
interface GigabitEthernet0/0
ipv6 address 2001:db8:1:1::/64 eui-64

Why this answer

Option B uses the correct syntax 'ipv6 address 2001:db8:1:1::/64 eui-64', which configures the prefix and derives the interface ID automatically from the MAC address via EUI-64. Option A is invalid because specifying the full 128-bit address with the eui-64 keyword is not allowed; the eui-64 keyword requires only a prefix. Option C omits the eui-64 keyword, so it configures a static address without using EUI-64, which would not match the requirement to use EUI-64.

Option D appends the MAC address after the eui-64 keyword, which is invalid syntax; the eui-64 keyword does not accept an explicit MAC address.

Exam trap

Remember that the 'ipv6 address ... eui-64' command automatically derives the interface ID from the MAC address. Do not manually calculate the EUI-64 address or include the MAC address in the command. Also, ensure you include the 'eui-64' keyword; without it, the command expects a full 128-bit address.

Why the other options are wrong

A

Invalid syntax: the eui-64 keyword cannot be used with a full 128-bit address; it requires only a prefix.

C

Missing the eui-64 keyword, so the interface would be configured with a static address rather than deriving the interface ID from the MAC.

D

Invalid syntax: the eui-64 keyword does not accept an explicit MAC address as an argument.

23
PBQhard

You are connected to R1. The network administrator has partially configured IPv4 and IPv6 on the interfaces. However, PC1 (connected to R1's G0/1) cannot reach PC2 (connected to R2's G0/1). Configure R1 and R2 so that PC1 can ping PC2. Fix any addressing errors. Use IPv4 subnet 192.0.2.0/30 for the link between R1 and R2, and 198.51.100.0/24 for the PC LANs. For IPv6, use 2001:db8:1::/64 on R1's G0/1 and 2001:db8:2::/64 on R2's G0/1, with R1's G0/1 using EUI-64 and R2's G0/1 using a static address 2001:db8:2::1/64.

Hints

  • Check the subnet mask on the link between R1 and R2.
  • IPv6 EUI-64 requires the interface to be up and unicast-routing enabled.
  • Ensure both routers have routes to each other's LANs.
A.On R1, change the subnet mask on G0/0 from /24 to /30. On R1 G0/1, issue 'ipv6 address 2001:db8:1::/64 eui-64' and 'no shutdown'. Enable 'ipv6 unicast-routing' globally on both routers.
B.On R1, change the subnet mask on G0/0 from /24 to /30. On R1 G0/1, issue 'ipv6 address 2001:db8:1::/64 eui-64' and 'no shutdown'. No need to enable IPv6 unicast-routing because it is on by default.
C.On R1, change the subnet mask on G0/0 from /24 to /30. On R1 G0/1, issue 'ipv6 address 2001:db8:1::/64' (without eui-64) and 'no shutdown'. Enable 'ipv6 unicast-routing' globally on both routers.
D.On R1, change the subnet mask on G0/0 from /24 to /30. On R1 G0/1, issue 'ipv6 address 2001:db8:1::/64 eui-64' and 'no shutdown'. Enable 'ipv6 unicast-routing' globally on both routers. Also, change the default gateway on PC1 to 2001:db8:1::1.
AnswerA
solution
! R1
interface GigabitEthernet0/0
ip address 192.0.2.1 255.255.255.252
exit
interface GigabitEthernet0/1
ipv6 address 2001:db8:1::/64 eui-64
no shutdown
exit
ipv6 unicast-routing

! R2

Why this answer

The issue is a subnet mask mismatch on the link between R1 and R2: R1 uses /24 (255.255.255.0) while R2 uses /30 (255.255.255.252). This prevents R1 from having a route to R2's LAN. Fix R1's G0/0 mask to /30.

Additionally, R1's G0/1 IPv6 EUI-64 command is missing the interface identifier; the correct command is 'ipv6 address 2001:db8:1::/64 eui-64' but the interface must be enabled with 'no shutdown'. Also ensure IPv6 unicast-routing is enabled. The PCs have correct gateways.

Exam trap

Watch for subnet mask mismatches on point-to-point links; they break routing. Also, remember that IPv6 unicast-routing is disabled by default and must be enabled. EUI-64 requires the 'eui-64' keyword and generates an address based on MAC, not a static ::1.

Why the other options are wrong

B

The specific factual error is that IPv6 unicast-routing is disabled by default on Cisco routers.

C

The specific factual error is that the command without 'eui-64' assigns a static address, not an EUI-64 address.

D

The specific factual error is assuming the EUI-64 address ends with ::1, which is not guaranteed.

24
Matchingmedium

Match each IPv6 concept to its most accurate description.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts
Matches

IPv6 addressing used for wider routed communication

IPv6 addressing used only on the local segment

Host self-configuration using router advertisements

OSPF version used for IPv6 routing operation

Why these pairings

These pairings accurately define key IPv6 concepts.

Exam trap

Be careful not to confuse the scope of IPv6 address types. Link-local addresses are not routable, unique local addresses are private, and anycast is one-to-nearest, not one-to-many. Remember that 'local' in link-local means the link, not the site.

25
Multi-Selectmedium

Which TWO statements about IPv4 and IPv6 static routing are correct?

Select 2 answers
A.A default static route is used when no dynamic routing protocols are configured.
B.A floating static route is configured with a higher administrative distance than the primary route.
C.A floating static route must have a lower administrative distance than the primary route.
D.An IPv6 default static route uses the prefix ::/0.
E.An IPv6 static route can specify an IPv4 address as the next-hop.
AnswersB, D

A floating static route is a backup route that is installed in the routing table only when the primary route (with a lower AD) is not available. By assigning a higher AD, the router prefers the primary route when it is reachable.

Why this answer

Option B is correct because a floating static route is configured with a higher administrative distance to serve as a backup when the primary route fails. Option D is correct because an IPv6 default static route uses the prefix ::/0 to match all destinations. Option A is incorrect because a default static route can be used independently of whether dynamic routing protocols are configured; it is simply a route with destination 0.0.0.0/0.

Option C is incorrect because a floating static route must have a higher AD, not lower, than the primary route. Option E is incorrect because an IPv6 static route cannot specify an IPv4 address as the next-hop; it must use an IPv6 address or an outgoing interface.

Exam trap

Cisco often tests the misconception that a floating static route must have a lower administrative distance than the primary route, when in fact it must be higher to serve as a backup.

Why the other options are wrong

A

A default static route is used as a gateway of last resort for any destination not in the routing table, regardless of whether dynamic routing protocols are configured. It is not dependent on the absence of dynamic routing.

C

A floating static route is designed to be a backup; therefore, it must have a higher AD than the primary route so that the primary route is preferred.

E

IPv6 static routes require an IPv6 next-hop address. Using an IPv4 address would be invalid because the router would not be able to resolve it in the IPv6 routing table.

26
PBQhard

You are connected to the console of R1. The network uses IPv6 and you need to configure an IPv6 address on interface G0/0 using the EUI-64 format. The subnet is 2001:db8:acad:1::/64. The interface MAC address is 0011.2233.4455. After configuration, verify that the full IPv6 address is correct.

Hints

  • EUI-64 automatically generates the interface ID from the MAC address.
  • The subnet prefix is /64, so the interface ID is 64 bits.
  • The MAC address 0011.2233.4455 will become 0211.22FF.FE33.4455.
A.ipv6 address 2001:db8:acad:1:0211:22ff:fe33:4455/64
B.ipv6 address 2001:db8:acad:1:0011:22ff:fe33:4455/64
C.ipv6 address 2001:db8:acad:1:0011:2233:4455/64
D.ipv6 address 2001:db8:acad:1:0211:2233:4455/64
AnswerA
solution
! R1
interface GigabitEthernet0/0
no shutdown
ipv6 address 2001:db8:acad:1::/64 eui-64

Why this answer

The EUI-64 method inserts FFFE in the middle of the MAC and flips the U/L bit. With the given MAC, the resulting interface ID is 0211:22FF:FE33:4455, forming the full IPv6 address.

Exam trap

Remember that EUI-64 requires both inserting FFFE and flipping the U/L bit. A common mistake is to do only one of these steps or to use the MAC address directly. Always verify the seventh bit of the first byte is flipped (0x00 becomes 0x02, 0x01 becomes 0x03, etc.).

Why the other options are wrong

B

The U/L bit was not flipped; the interface ID starts with 0011 instead of 0211.

C

The FFFE insertion is missing; the interface ID is just the MAC address written in IPv6 format.

D

FFFE is missing; only the U/L bit flip was applied.

27
MCQhard

A technician is troubleshooting a dual-stack network where an IPv6-only host cannot reach an IPv4 resource. The technician issues the show ipv6 interface brief command on the local router and notices the interface facing the host has a link-local address but no global unicast address. The technician then checks the running configuration and finds that the command ipv6 unicast-routing is missing. What is the most likely cause?

A.An IPv6 access list on the router is blocking Router Advertisement messages.
B.IPv6 unicast routing has not been enabled on the router.
C.The IPv4 resource is not configured for NAT64 translation.
D.The host has an incorrect default gateway for IPv6.
AnswerB

The ipv6 unicast-routing command is required to enable IPv6 forwarding on Cisco routers. Without it, the router does not participate in IPv6 routing, does not generate Router Advertisements, and interfaces will not obtain global unicast addresses through SLAAC or DHCPv6 relay. The show ipv6 interface output displaying only a link-local address, combined with the absence of ipv6 unicast-routing in the configuration, confirms this root cause.

Why this answer

The missing `ipv6 unicast-routing` command means the router is not acting as an IPv6 router, so it does not send Router Advertisement (RA) messages. Without RAs, the host cannot autoconfigure a global unicast address or learn a default gateway, breaking IPv6 connectivity to any IPv4 resource even if NAT64 is present.

Exam trap

Cisco often tests the misconception that configuring an IPv6 address on an interface is sufficient for IPv6 routing, when in fact the global `ipv6 unicast-routing` command is required to enable the router to forward IPv6 packets and send Router Advertisements.

Why the other options are wrong

A

This option focuses on a filtering issue, not the disabled routing engine, and would not cause the router’s own interface to lack a global unicast address.

C

NAT64 configuration would affect translation, but the root cause visible in the output is the lack of IPv6 routing capability on the router.

D

This shifts the blame to the host, but the router-side evidence (missing command and missing global unicast) clearly indicates a router configuration problem.

28
MCQmedium

Which command correctly configures an IPv6 default route using next-hop address 2001:db8:1::1?

A.ipv6 route ::/0 2001:db8:1::1
B.ip route :: 2001:db8:1::1
C.ipv6 default-route 2001:db8:1::1
D.ip default-gateway 2001:db8:1::1
AnswerA

Correct. This is the valid IOS syntax for an IPv6 default route.

Why this answer

The correct IPv6 default route uses the prefix ::/0 with the command 'ipv6 route ::/0'. Option B is wrong because 'ip route' is used for IPv4 routes, not IPv6. Option C uses 'ipv6 default-route', which is not a valid Cisco IOS command.

Option D sets the management default gateway for IPv4 only and does not insert a route into the IPv6 routing table.

Exam trap

Be cautious about the syntax order and the correct representation of the IPv6 default route prefix.

Why the other options are wrong

B

Uses 'ip route', which is for IPv4; IPv6 routes require 'ipv6 route'.

C

'ipv6 default-route' is not a valid Cisco IOS command.

D

'ip default-gateway' configures the management default gateway for IPv4, not an IPv6 routing entry.

29
Multi-Selectmedium

Which two statements accurately describe IPv6 link-local addresses?

Select 2 answers
A.They are used for communication on the local segment only.
B.They are globally routable across the Internet.
C.They are commonly involved in local IPv6 neighbor interactions.
D.They exist only when DHCPv6 fails.
E.They replace the need for any default gateway logic.
AnswersA, C

This is correct because link-local addresses are intended for local-link communication.

Why this answer

IPv6 link-local addresses are designed for communication on the local segment only. In plain language, they allow devices to talk to nearby neighbors without needing globally routable addresses. They play an important role in IPv6 functions such as Neighbor Discovery and are commonly used when hosts communicate with the default gateway on the same link. These addresses are normal and expected in IPv6 environments.

They are not globally Internet-routable, and they are not just emergency fallbacks for DHCPv6 failure. The two correct answers are the ones that preserve their local-link purpose and their importance in standard IPv6 behavior rather than treating them as optional or globally reachable.

Exam trap

Remember that link-local addresses are not routable and are not a fallback for DHCPv6. They are essential for local communications.

Why the other options are wrong

B

Link-local addresses have a scope of link-local (fe80::/10) and are not forwarded by routers, making them non-routable across the Internet. They are intended only for communication on a single network segment.

D

Link-local addresses are automatically generated on all IPv6 interfaces regardless of DHCPv6. They are a mandatory part of IPv6 operation, not a fallback mechanism.

E

For off-link communication, IPv6 hosts still require a default gateway (usually a router's link-local address) to forward packets beyond the local segment. Link-local addresses do not eliminate the need for routing logic.

30
MCQmedium

Which command enables IPv6 routing on a Cisco router?

A.ipv6 unicast-routing
B.ipv6 enable
C.ip routing ipv6
D.ipv6 route enable
AnswerA

Correct. This is the required global command.

Why this answer

The global configuration command 'ipv6 unicast-routing' enables IPv6 forwarding on a Cisco router. 'ipv6 enable' is an interface-level command used to enable IPv6 on a specific interface, not globally. 'ip routing ipv6' and 'ipv6 route enable' are syntactically invalid commands that do not exist in Cisco IOS.

Exam trap

Be careful not to confuse interface-specific commands with global routing commands. Remember that enabling IPv6 globally requires a specific command.

Why the other options are wrong

B

'ipv6 enable' is an interface command, not a global command to enable IPv6 routing.

C

'ip routing ipv6' is not a valid Cisco IOS command.

D

'ipv6 route enable' is not a valid Cisco IOS command.

31
MCQhard

Two routers are directly connected over IPv6 and should form an OSPFv3 adjacency, but they do not. Link-local addressing is present on both interfaces. Which issue is most likely to prevent the adjacency?

A.The interfaces are assigned to different OSPFv3 areas.
B.The routers need matching hostnames before OSPFv3 can start.
C.IPv6 requires a /64 only for routing protocols to function.
D.OSPFv3 cannot run on directly connected interfaces.
AnswerA

This is correct because OSPF neighbors on the same segment must agree on the area for adjacency formation.

Why this answer

An area mismatch is a strong and direct explanation. In plain language, even though the routers can have valid IPv6 addressing and proper link-local communication on the interface, OSPFv3 still requires the two ends of the shared segment to agree on the area context for the adjacency. If one side places the interface in one area and the other side places it in another, the routers will not treat each other as valid neighbors.

This is very similar in principle to OSPF for IPv4. Link-local addressing matters in OSPFv3, but the protocol still enforces key neighbor-formation checks. The correct answer is the one that focuses on a required protocol match rather than on a vague issue like hostname or cable color.

Exam trap

Focus on OSPFv3 configuration requirements like area matching, not on distractors such as hostnames or prefix length.

Why the other options are wrong

B

OSPFv3 adjacency formation does not depend on hostnames; hostnames are only used for identification in show commands and have no impact on routing protocol operation.

C

OSPFv3 can use any valid IPv6 prefix length, including /64, /126, or /127, for the link between routers. The /64 requirement is for SLAAC, not for routing protocols.

D

OSPFv3 is specifically designed to run on directly connected interfaces, just like OSPFv2. It forms adjacencies over directly connected links to exchange routing information.

32
Matchingmedium

Drag and drop the IPv4/IPv6 static routing concepts on the left to the correct descriptions on the right.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts
Matches

IPv4 default static route

IPv6 default static route

Floating static route (backup)

Standard IPv4 static route

Standard IPv6 static route

Summary static route (discard)

Why these pairings

Each command matches its description as follows: "ip route 0.0.0.0 0.0.0.0 serial0/0/0" is an IPv4 default static route because it uses all-zeros network and mask to match any destination and specifies an exit interface. "ipv6 route ::/0 serial0/0/0" is an IPv6 default static route for the same reason with IPv6. "ip route 10.0.0.0 255.0.0.0 192.168.1.1 200" sets an administrative distance of 200, making it a floating static route that serves as a backup when the primary route fails. "ip route 10.0.0.0 255.0.0.0 192.168.1.1" is a standard static route pointing to a next-hop IP with a specific destination. "ipv6 route 2001:db8::/32 2001:db8:1::1" is a standard IPv6 static route. "ip route 10.0.0.0 255.0.0.0 null0" creates a summary static route (also called a discard route) that drops traffic matching the aggregate to prevent routing loops.

Exam trap

Do not confuse 'default route' with 'summary route'—default matches any destination, summary matches a block of networks. Also, floating routes are about backup, not broad matching.

33
Drag & Dropmedium

Drag and drop the following commands into the correct order to configure OSPFv3 for IPv6 on a Cisco router.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps
Order
1Step 1
2Step 2
3Step 3
4Step 4

Why this order

Commands must be executed in order: global config, IPv6 routing, interface config, OSPFv3 on interface, then verification.

Exam trap

The most common trap is starting with the OSPFv3 router configuration command without first enabling IPv6 routing globally. Also, candidates may try to apply the interface-level OSPFv3 command before entering interface configuration mode.

34
Drag & Dropmedium

Drag and drop the steps into the correct order to generate an IPv6 EUI-64 address from a MAC address.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps
Order
1Step 1
2Step 2
3Step 3
4Step 4

Why this order

Start by obtaining the MAC address and splitting it into two 24‑bit halves (OUI and NIC portions). Insert FFFE in the middle to create a 64‑bit interface identifier. Flip the U/L bit (7th bit) of the first byte, then combine the identifier with the IPv6 prefix (e.g., FE80::/10 for link‑local) to form the complete address.

Exam trap

Students often forget to flip the U/L bit or perform the steps in the wrong order. Remember: MAC → split → insert FFFE → flip U/L bit → combine with prefix.

35
Matchingmedium

Match each IPv6 host-configuration concept to its most accurate description.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts
Matches

Host forms addressing information using router advertisements

Server-based IPv6 host configuration method

IPv6 addressing used only on the local link

Method for deriving an interface ID from a MAC address

Why these pairings

SLAAC enables stateless autoconfiguration; stateful DHCPv6 assigns addresses; SLAAC uses RA and EUI-64; DHCPv6-PD delegates prefixes; link-local addresses are for local links.

Exam trap

Be careful not to confuse the roles of Stateful and Stateless DHCPv6: Stateful assigns addresses, Stateless provides extra info. Also, remember that EUI-64 generates the interface ID, not the prefix.

36
Matchingmedium

Match each IPv6 address type or concept to its most accurate description.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts
Matches

IPv6 address type used for wider routed communication

IPv6 address type used only on the local segment

Address used by a device to refer to itself

Method for deriving an interface identifier from a MAC address

Why these pairings

Each IPv6 address type has a distinct purpose: Global Unicast for public routing, Link-Local for local segment, Unique Local for private site, Multicast for group communication, Anycast for nearest device, and SLAAC for stateless address assignment.

Exam trap

The most common trap is confusing the scope of Link-Local and Unique Local addresses. Remember: Link-Local is only for the local link, while Unique Local is for private site-wide use but not internet-routable. Also, don't confuse multicast with unicast.

37
PBQhard

You are connected to R1 via console. The network has a primary link to the ISP via R2 and a backup link via R3. Configure IPv4 and IPv6 floating static default routes on R1 so that the primary path goes through R2 (AD 1) and the backup through R3 (AD 10). Additionally, configure a static route on R1 for the internal LAN 192.168.10.0/24 via R2 (AD 1). The current configuration includes a static default route ip route 0.0.0.0 0.0.0.0 10.0.0.3, which causes a recursive routing failure because 10.0.0.3 is not a valid next-hop address. Identify and fix the issue, then apply the floating static routes.

Network Topology
G0/010.0.0.1/30G0/010.0.0.2/30link1G0/1G0/010.0.0.6/30link2R1R2R3

Hints

  • The IPv4 default route to 10.0.0.2 is missing from the routing table. Check if the next-hop is reachable via a directly connected interface.
  • Remove the existing problematic static default route and reconfigure it with an explicit administrative distance of 1.
  • For IPv6, use the ipv6 route command with the prefix ::/0 and specify the next-hop and administrative distance.
A.Remove the existing incorrect IPv4 static default route and reconfigure the primary IPv4 default route with the correct next-hop address (10.0.0.2) and AD 1. Add the backup IPv4 default route via 10.0.0.6 with AD 10. Then add IPv6 static default routes: ipv6 route ::/0 2001:DB8:1:1::2 1 and ipv6 route ::/0 2001:DB8:2:1::2 10. Also add the static route for 192.168.10.0/24 via 10.0.0.2 with AD 1.
B.Add a static route to 10.0.0.0/30 via the backup link to R3, then the default route to 10.0.0.2 will work. Then configure IPv6 default routes with AD 1 and 10 as described.
C.Change the administrative distance of the IPv4 default route to 10 and the backup to 1, so the backup becomes primary. Then configure IPv6 default routes with AD 10 and 1 respectively.
D.Remove the existing IPv4 static default route and configure it with the next-hop as the exit interface (e.g., GigabitEthernet0/0) instead of the IP address. Then add IPv6 default routes using the exit interface as well.
AnswerA
solution
! R1
no ip route 0.0.0.0 0.0.0.0 10.0.0.2
ip route 0.0.0.0 0.0.0.0 10.0.0.2 1
ipv6 route ::/0 2001:DB8:1:1::2 1
ipv6 route ::/0 2001:DB8:2:1::2 10

Why this answer

The IPv4 default route currently uses next-hop 10.0.0.3, which is not a valid address on any directly connected interface, causing a recursive lookup failure. Option A fixes this by removing the incorrect route and correctly adding the primary (10.0.0.2 with AD 1) and backup (10.0.0.6 with AD 10) default routes, fulfilling the floating static requirement. It also adds both IPv6 floating default routes and the LAN static route.

Option B is wrong because adding a route to 10.0.0.0/30 via R3 does not fix the next-hop 10.0.0.3 failure for the default route. Option C incorrectly reverses the administrative distances, making the backup path the primary. Option D erroneously uses an exit interface instead of the correct next-hop IP, which is not suitable for multi-access or point-to-point networks without additional configuration and does not resolve the original misconfigured next-hop.

Exam trap

Be careful: Recursive routing failure means the next-hop is not reachable. Check if the next-hop is directly connected and the interface is up. Do not confuse administrative distance with metric; lower AD is preferred.

Also, ensure IPv6 routes use the correct next-hop addresses and AD values.

Why the other options are wrong

B

Adding a static route to the backup link does not correct the invalid next-hop 10.0.0.3 used in the default route and fails to address the root cause of the recursive lookup failure.

C

Swapping the administrative distances makes the backup path preferred instead of the primary, violating the requirement that R2 be the primary with AD 1.

D

Configuring the default route with an exit interface rather than a next-hop IP can cause ARP resolution issues in broadcast networks and does not replace the incorrect next-hop 10.0.0.3.

38
PBQhard

You are connected to R1. Configure OSPFv3 for IPv6 on R1 and R2 so that they can exchange IPv6 routes. R1's GigabitEthernet0/0 is connected to R2's GigabitEthernet0/0. R1 has a loopback0 with IPv6 address 2001:db8:1::1/32, and R2 has a loopback0 with IPv6 address 2001:db8:2::2/32. Ensure OSPFv3 is enabled on both routers, the link interfaces are in area 0, and R1 learns the loopback route from R2.

Network Topology
G0/02001:db8:abcd::1/64G0/02001:db8:abcd::2/64linkR1R2

Hints

  • OSPFv3 must be enabled on each interface that should participate in the routing process.
  • Use the 'ipv6 ospf <process-id> area <area-id>' command under the interface configuration.
  • Verify with 'show ospfv3 neighbor' and 'show ipv6 route ospf'.
A.Configure 'ipv6 ospf 1 area 0' under GigabitEthernet0/0 and Loopback0 on both routers.
B.Configure 'ipv6 router ospf 1' and then 'network 2001:db8:2::2/32 area 0' under the OSPFv3 process.
C.Configure 'ipv6 unicast-routing' and 'ipv6 ospf 1 area 0' under the global configuration.
D.Configure 'router ospf 1' and then 'ipv6 unicast-routing' under the OSPFv3 process.
AnswerA
solution
! R1
interface GigabitEthernet0/0
ipv6 ospf 1 area 0
exit
interface Loopback0
ipv6 ospf 1 area 0

Why this answer

The provided configuration enables OSPFv3 on the interfaces, which is necessary, but it does not set a router-id. OSPFv3 requires a router-id to form adjacencies. Without any IPv4 addresses configured, the router-id defaults to 0.0.0.0, preventing neighbor formation and route exchange.

Therefore, a valid solution must also include a router-id command under the OSPFv3 process (e.g., 'ipv6 router ospf 1' followed by 'router-id X.X.X.X').

Exam trap

Learners often forget that OSPFv3 requires a manually configured router-id when no IPv4 addresses are present on the router.

Why the other options are wrong

B

The specific factual error is that OSPFv3 uses interface-level commands ('ipv6 ospf area') rather than the network statement used in OSPFv2.

C

The specific factual error is that OSPFv3 interface configuration is required on each interface, not just globally.

D

The specific factual error is that 'router ospf' is for IPv4 OSPF; OSPFv3 requires 'ipv6 router ospf'.

39
Multi-Selectmedium

Which TWO statements correctly describe the configuration and verification of OSPFv3 for IPv6?

Select 2 answers
A.OSPFv3 uses link-local IPv6 addresses to form neighbor adjacencies.
B.OSPFv3 uses global unicast IPv6 addresses to form neighbor adjacencies.
C.OSPFv3 is automatically enabled on all IPv6-enabled interfaces when the routing process is configured.
D.The 'show ospfv3 neighbor' command displays neighbor state, neighbor ID, and interface information.
E.The 'show ospfv3 neighbor' command displays the IPv6 address of the neighbor's interface as the neighbor ID.
AnswersA, D

OSPFv3 routers use link-local addresses (FE80::/10) for neighbor discovery and hello packets, ensuring communication remains within the local link.

Why this answer

OSPFv3 for IPv6 uses link-local IPv6 addresses (FE80::/10) to form neighbor adjacencies, not global unicast addresses (so B is incorrect). OSPFv3 does not automatically enable on all IPv6 interfaces; each interface must be explicitly configured under the OSPFv3 process using the 'ipv6 ospf' command (so C is incorrect). The 'show ospfv3 neighbor' command displays the neighbor's Router ID (a 32-bit value), not the IPv6 address of the neighbor's interface (so E is incorrect).

Correct options A and D accurately describe OSPFv3 neighbor formation using link-local addresses and the information shown by the 'show ospfv3 neighbor' command, which includes neighbor state, neighbor ID, and interface.

Exam trap

Cisco often tests the misconception that OSPFv3 behaves like OSPFv2 by using global unicast addresses for neighbor formation, or that enabling the OSPFv3 process automatically activates it on all interfaces, when in fact each interface must be explicitly enabled under the OSPFv3 process.

Why the other options are wrong

B

OSPFv3 uses link-local addresses, not global unicast addresses, for neighbor formation.

C

OSPFv3 requires explicit interface configuration under the routing process; it is not automatically enabled.

E

The neighbor ID shown is the Router ID, not the IPv6 address of the neighbor's interface.

40
PBQhard

You are connected to R1 via console. R1 must reach the remote loopback 2001:db8:1::1/128 on R3 via R2 (2001:db8:0:2::2/64). Currently, IPv6 ping fails. Additionally, configure a floating static default route via R2 (198.51.100.2/30) with an appropriate AD so that it only becomes active if a dynamic default route (with default AD 1) is absent. Identify and fix the recursive routing failure, correct the next-hop, set the correct AD, and ensure the default route is present.

Network Topology
G0/12001:db8:0:2::1/64G0/12001:db8:0:2::2/64G0/12001:db8:0:2::2/64R2R1R3

Hints

  • Check if the next-hop address is directly connected; use show ipv6 route to see if a recursive route exists.
  • The default AD for a static route is 1; for a floating static route to back up a dynamic protocol, use a higher AD (e.g., 254).
  • Use the exit interface in the static route to avoid recursive lookup failure.
A.Change the IPv6 static route to '2001:db8:1::1/128 GigabitEthernet0/1 2001:db8:0:2::2' and set the floating default route's AD to 254.
B.Change the IPv6 static route to '2001:db8:1::1/128 2001:db8:0:2::1' and set the floating default route's AD to 1.
C.Change the IPv6 static route to '2001:db8:1::1/128 GigabitEthernet0/1 2001:db8:0:2::2' and set the floating default route's AD to 1.
D.Change the IPv6 static route to '2001:db8:1::1/128 2001:db8:0:2::2' and set the floating default route's AD to 254.
AnswerA, D
solution
! R1
no ipv6 route 2001:db8:1::1/128 2001:db8:0:2::1
ipv6 route 2001:db8:1::1/128 GigabitEthernet0/1 2001:db8:0:2::2
no ip route 0.0.0.0 0.0.0.0 198.51.100.2 1
ip route 0.0.0.0 0.0.0.0 198.51.100.2 254

Why this answer

The original IPv6 static route uses the next-hop 2001:db8:0:2::1, which is R1's own G0/1 address, causing a routing loop. Correct the route by specifying a directly connected remote next-hop (2001:db8:0:2::2) either with or without the exit interface. Set the floating static default route with an AD higher than the dynamic route's default AD (e.g., 254) so it becomes a backup.

Option A (exit interface + next-hop) and Option D (next-hop only) both achieve this; Options B and C fail due to wrong next-hop or AD.

Exam trap

Be careful: using the router's own IP as a next-hop creates a forwarding loop, not a reachability failure. For a floating static route, the AD must be higher than the active route's AD to act as a backup.

Why the other options are wrong

B

The next-hop is R1's own address (loop) and AD 1 makes the route equally preferred to dynamic routes, defeating the floating purpose.

C

AD 1 makes the route equally preferred, not a floating backup.

41
PBQhard

You are connected to R1. Configure OSPFv3 for IPv6 so that R1 and R2 can exchange IPv6 routes over their directly connected link. Enable IPv6 routing, assign OSPFv3 process and area on the interface, and verify that the neighbor adjacency forms and routes appear in the IPv6 routing table.

Network Topology
G0/02001:DB8:1::1/64G0/0 2001:DB8:1::2/64R1R2

Hints

  • OSPFv3 requires IPv6 unicast routing to be enabled globally.
  • OSPFv3 is enabled on the interface, not under a router ospf process like OSPFv2.
  • Use 'ipv6 ospf <process-id> area <area-id>' on the interface.
A.Enable IPv6 routing with 'ipv6 unicast-routing', configure OSPFv3 on the interface with 'ipv6 ospf 1 area 0', and verify with 'show ospfv3 neighbor' and 'show ipv6 route ospf'.
B.Enable IPv6 routing with 'ipv6 unicast-routing', configure OSPFv3 globally with 'router ospfv3 1' and 'router-id 1.1.1.1', then assign the interface to area 0 with 'ipv6 ospf 1 area 0'.
C.Enable IPv6 routing with 'ipv6 unicast-routing', configure OSPFv3 on the interface with 'ipv6 ospf 1 area 0', and verify with 'show ip ospf neighbor' and 'show ip route ospf'.
D.Enable IPv6 routing with 'ipv6 unicast-routing', configure OSPFv3 on the interface with 'ipv6 ospf 1 area 0', and verify with 'show ospfv3 neighbor' and 'show ipv6 route'.
AnswerA
solution
! R1
configure terminal
ipv6 unicast-routing
interface GigabitEthernet0/0
ipv6 ospf 1 area 0
end

Why this answer

Option A is correct because it includes enabling IPv6 routing with 'ipv6 unicast-routing', applying OSPFv3 to the interface using 'ipv6 ospf 1 area 0', and verifying with the correct OSPFv3-specific commands 'show ospfv3 neighbor' and 'show ipv6 route ospf'. Option B is incorrect because it adds a global 'router ospfv3 1' command, which is unnecessary; OSPFv3 can be configured directly on the interface without a global process. Option C is incorrect because it uses IPv4 OSPF verification commands 'show ip ospf neighbor' and 'show ip route ospf', which are not valid for OSPFv3.

Option D is incorrect because although it uses the correct 'show ospfv3 neighbor', the 'show ipv6 route' command does not filter to OSPF-learned routes, so it displays all IPv6 routes rather than just OSPF routes.

Exam trap

Do not confuse OSPFv3 with OSPFv2. OSPFv3 uses 'ipv6 ospf' on the interface and 'show ospfv3 neighbor' for verification. Also, remember to enable IPv6 routing with 'ipv6 unicast-routing'.

Why the other options are wrong

B

Adding a global 'router ospfv3 1' command is unnecessary; OSPFv3 can be enabled directly on the interface without a separate global configuration.

C

Using 'show ip ospf neighbor' and 'show ip route ospf' are IPv4 OSPFv2 commands, not valid for OSPFv3 which requires 'show ospfv3 neighbor' and 'show ipv6 route ospf'.

D

The 'show ipv6 route' command displays all IPv6 routes, not just OSPF-learned ones; the filter 'ospf' is required to see OSPF routes specifically.

42
MCQmedium

Which IPv6 address type is automatically created on an interface and used for communication on the local link only?

A.Global unicast
C.Unique local
D.Multicast
AnswerB

Correct. Link-local addresses exist per link and are not routed.

Why this answer

Every IPv6-enabled interface generates a link-local address, typically in the FE80::/10 range. It is used for neighbor discovery, local communication, and next-hop resolution on the same link.

Exam trap

A common exam trap is confusing link-local addresses with unique local or global unicast addresses. Link-local addresses are automatically generated and only valid on the local link, whereas unique local addresses resemble private IPv4 addresses but are routable within an organization. Multicast addresses are not assigned to interfaces for unicast communication, so selecting multicast is incorrect.

Understanding the scope and automatic generation of link-local addresses is critical.

Why the other options are wrong

A

Global unicast addresses are routable beyond the local link and are not automatically created for local link communication only.

C

Unique local addresses are similar to private IPv4 addresses and are routable within an organization, not limited to the local link.

D

Multicast addresses are used for group communication and are not assigned as interface addresses for unicast communication.

43
MCQhard

A network administrator is troubleshooting an IPv6 connectivity issue on a newly deployed router. The router's G0/0/0 interface is configured with an IPv6 address using EUI-64, but hosts on that subnet cannot reach the router's link-local address. The administrator runs 'show ipv6 interface g0/0/0' and sees that the interface is up/up but the IPv6 address is not in the expected format. What is the most likely cause of the problem?

A.The interface is administratively down.
B.The IPv6 address was not configured correctly; the 'ipv6 address' command was likely omitted or misconfigured.
C.The MAC address of the interface is invalid, preventing EUI-64 from generating a proper address.
D.The router is not sending Router Advertisements, so hosts cannot autoconfigure.
AnswerB

If the 'ipv6 address' command was omitted, IPv6 is not enabled, and no link-local address exists. If it was misconfigured (e.g., missing the `eui-64` keyword), the router would still have a link-local address, so the symptom of hosts unable to reach the link-local address would not occur. Therefore, omission is the most likely cause given the symptom.

Why this answer

The router's G0/0/0 interface is up/up, but the IPv6 address is not in the expected EUI-64 format. This indicates that the 'ipv6 address' command was likely omitted entirely, because if it were simply misconfigured (e.g., without the `eui-64` keyword), the router would still automatically generate a link-local address, and hosts would be able to reach it. Since hosts cannot reach the link-local address, IPv6 is not enabled on the interface at all.

The correct configuration requires the `ipv6 address` command with the appropriate prefix and the `eui-64` keyword.

Exam trap

Cisco often tests the distinction between interface status (up/up) and configuration correctness, leading candidates to assume that a working interface means the IPv6 address is properly configured, when in fact the address may be missing or misconfigured.

Why the other options are wrong

A

The 'show ipv6 interface' output shows 'up, line protocol is up', indicating the interface is not administratively down. An administratively down interface would show 'administratively down' in the output.

C

The link-local address (FE80::21A:2BFF:FE3C:4D5E) is correctly formed using EUI-64, which requires a valid MAC address. The presence of 'FF:FE' in the middle indicates EUI-64 is functioning properly, so the MAC address is valid.

D

The output shows 'ND router advertisements are sent every 200 seconds', confirming that Router Advertisements are enabled. The problem is about the router's own IPv6 address, not host autoconfiguration.

44
Drag & Dropmedium

Drag and drop the following steps into the correct order to explicitly configure OSPFv3 for IPv6 on a Cisco IOS-XE router, assuming no OSPFv3 routing process exists beforehand.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps
Order
1Step 1
2Step 2
3Step 3
4Step 4

Why this order

To configure OSPFv3, first globally enable IPv6 unicast routing (A). Next, create the OSPFv3 routing process (C) so that it is defined before interfaces try to use it. Then, configure OSPFv3 on the relevant interfaces (B) to activate routing.

Finally, verify the OSPFv3 adjacency (D) to confirm neighbors are formed. This sequence avoids automatic process creation and ensures all steps are explicitly controlled.

Exam trap

Cisco exams often test the order of configuration steps. A common trap is to think that OSPFv3 interface configuration comes before creating the OSPFv3 process, or that verification can be done early. Remember that global IPv6 routing must be enabled first, as OSPFv3 depends on it.

45
PBQhard

You are connected to R1. The network has R1, R2, and a multilayer switch MLS1. Configure IPv4 and IPv6 addressing on R1's interfaces so that R1 can ping both R2 (198.51.100.2) and MLS1 (203.0.113.2) via IPv4. Additionally, configure IPv6 on G0/1 using EUI-64 with prefix 2001:db8:1::/64 and verify that R1 can ping the IPv6 address of MLS1 (2001:db8:1::2). The current configuration has incorrect subnet masks and missing IPv6 settings, causing reachability failures.

Hints

  • The subnet mask on both interfaces is too large; it should be /30.
  • IPv6 is not enabled on G0/1 yet; use the 'ipv6 address' command with EUI-64.
  • After changing the mask, the ping should work because the devices will be on the same subnet.
A.Change the subnet mask on G0/0 to 255.255.255.252, change G0/1 to 255.255.255.252, then configure IPv6 on G0/1 with the EUI-64 address using the prefix 2001:db8:1::/64.
B.Change the subnet mask on G0/0 to 255.255.255.0, change G0/1 to 255.255.255.0, then configure IPv6 on G0/1 with the EUI-64 address using the prefix 2001:db8:1::/64.
C.Change the subnet mask on G0/0 to 255.255.255.252, change G0/1 to 255.255.255.252, then configure IPv6 on G0/1 with the static address 2001:db8:1::1/64.
D.Change the subnet mask on G0/0 to 255.255.255.252, change G0/1 to 255.255.255.252, then configure IPv6 on G0/1 with the EUI-64 address using the prefix 2001:db8:1::/32.
AnswerA
solution
! R1
interface GigabitEthernet0/0
ip address 198.51.100.1 255.255.255.252
exit
interface GigabitEthernet0/1
ip address 203.0.113.1 255.255.255.252
ipv6 address 2001:db8:1::/64 eui-64
exit

Why this answer

The interfaces on R1 were configured with subnet masks that were not /30, which is required for these point-to-point links. With an incorrect mask, R1 does not consider the neighboring IPs (198.51.100.2 and 203.0.113.2) as directly connected, preventing ARP resolution and IPv4 reachability. Additionally, IPv6 was missing on G0/1.

To fix, change the subnet mask on G0/0 to 255.255.255.252, change G0/1 to 255.255.255.252, then configure IPv6 on G0/1 with the EUI-64 address using the prefix 2001:db8:1::/64. After these changes, pings succeed.

Exam trap

This question tests your understanding of subnet masks and their impact on Layer 3 reachability. A common trap is to focus only on IPv6 and forget that incorrect IPv4 subnet masks can prevent ARP resolution, even if IPv6 is configured correctly. Also, pay close attention to the exact requirements: EUI-64 and the correct prefix length.

Why the other options are wrong

B

The specific factual error is that /24 masks are too large for point-to-point links and do not match the expected subnets for R2 and MLS1.

C

The specific factual error is that the IPv6 address should be configured with the EUI-64 keyword, not a static address.

D

The specific factual error is that the prefix length must be /64 as specified in the question; a /32 prefix is incorrect for this scenario.

46
Multi-Selectmedium

Which TWO statements accurately describe OSPFv3 configuration and verification for IPv6?

Select 2 answers
A.OSPFv3 uses IPv6 link-local addresses for neighbor discovery and next-hop addresses.
B.The 'network' command under 'ipv6 router ospf' is used to advertise subnets into OSPFv3.
C.The 'ipv6 ospf <process-id> area <area-id>' command is used to enable OSPFv3 on an interface.
D.The 'ipv6 router ospf <process-id>' command is used on an interface to enable OSPFv3.
E.The 'show ipv6 ospf neighbor' command displays the OSPFv3 link-state database.
AnswersA, C

In OSPFv3, routers form adjacencies using their IPv6 link-local addresses, and these addresses are used as next-hop addresses in routing updates.

Why this answer

Option A is correct because OSPFv3 uses IPv6 link-local addresses for neighbor discovery and next-hop addresses. Option C is correct because the 'ipv6 ospf <process-id> area <area-id>' interface command enables OSPFv3 on that interface. Option B is incorrect: OSPFv3 does not use the 'network' command; instead, it relies on interface-level configuration.

Option D is incorrect: 'ipv6 router ospf <process-id>' is a global configuration command to enter OSPFv3 router configuration mode, not an interface command. Option E is incorrect: 'show ipv6 ospf neighbor' displays neighbor adjacencies, not the link-state database; use 'show ipv6 ospf database' for that.

Exam trap

Cisco often tests the misconception that OSPFv3 uses the same 'network' command as OSPFv2, when in fact OSPFv3 requires interface-level configuration with the 'ipv6 ospf <process-id> area <area-id>' command.

Why the other options are wrong

D

'ipv6 router ospf <process-id>' is a global configuration command, not an interface command; enabling OSPFv3 on an interface requires the 'ipv6 ospf <process-id> area <area-id>' command.

E

'show ipv6 ospf neighbor' displays OSPFv3 neighbor adjacencies, not the link-state database; to view the LSDB, use 'show ipv6 ospf database'.

47
Drag & Dropmedium

Drag and drop the following steps into the correct order to configure IPv4 and IPv6 static routes, a default route, and a floating static route with a higher administrative distance, then verify with show ip route and show ipv6 route.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps
Order
1Step 1
2Step 2
3Step 3
4Step 4

Why this order

Start in global config, then configure static routes for IPv4, then IPv6, then default and floating static routes. Finally verify with show commands.

Exam trap

Do not confuse the order of configuration with the order of route preference. The default route is not configured first; it is configured after specific routes. Also, while IPv4 and IPv6 can be configured in any order, the question expects IPv4 before IPv6 based on the stem.

48
Drag & Dropmedium

Drag and drop the following steps into the correct order to configure a Cisco switch with an IPv4 management address 192.168.1.10/24, an IPv6 address 2001:db8:1::1/64, and a default gateway 192.168.1.1.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps
Order
1Step 1
2Step 2
3Step 3
4Step 4
5Step 5
6Step 6
7Step 7

Why this order

Correct order:

Enter global configuration mode – all subsequent configuration commands require this mode.

Enter interface configuration mode for VLAN 1 – the management SVI must be selected to apply IP settings.

Assign the IPv4 address 192.168.1.10 255.255.255.0 – sets the switch's management IPv4 address and subnet mask.

Enable the interface with the no shutdown command – activates the SVI so it can send and receive traffic.

Assign the IPv6 address 2001:db8:1::1/64 – enables IPv6 processing and statically configures a global unicast address.

Exit interface configuration mode to return to global configuration mode – required because the default gateway command is a global configuration command, not an interface subcommand.

Set the default gateway to 192.168.1.1 using the ip default-gateway command – provides the next-hop router for IPv4 traffic leaving the local subnet.

49
Multi-Selectmedium

Which TWO DNS record types are most commonly used together to verify both forward and reverse DNS mappings for an IPv6 address?

Select 2 answers
A.A record
B.AAAA record
C.CNAME record
D.PTR record
E.MX record
AnswersB, D

The AAAA record is the standard record type for mapping a domain name to an IPv6 address.

Why this answer

The AAAA record (Quad-A record) maps a domain name to an IPv6 address, making it the standard type for forward IPv6 lookups. The PTR record performs the reverse mapping—from an IPv6 address back to a domain name. Administrators routinely check both records with tools like nslookup or dig to ensure forward and reverse DNS consistency, which is critical for services such as email and security logging.

The other options (A, CNAME, MX) do not directly provide a domain-to-IPv6 mapping or its reverse verification.

Exam trap

Cisco often tests the misconception that an A record can be used for IPv6 addresses, but the A record is strictly for IPv4 (RFC 1035), while the AAAA record is the correct type for IPv6 (RFC 3596).

Why the other options are wrong

A

An A record maps a hostname to an IPv4 address, not an IPv6 address. Since the question specifically asks about IPv6, this record type is incorrect.

C

A CNAME record creates an alias from one domain name to another, not a direct mapping to an IP address. It does not provide the IP address itself, so it cannot verify the mapping to an IPv6 address.

E

MX records specify mail exchange servers for a domain and are used for email routing, not for mapping domain names to IP addresses. They do not provide IPv6 address mappings.

50
MCQhard

An IPv6 host successfully reaches neighbors on its local segment, but it cannot reach remote IPv6 destinations. The host has a global unicast address and a correct prefix length. Which missing item is the strongest suspect?

A.A usable default router or next-hop route for off-link IPv6 traffic
B.A NAT rule translating IPv6 to IPv4
C.A VLAN trunk on the host NIC
D.A second global unicast address on the same interface
AnswerA

This is correct because the host needs a next hop to reach remote IPv6 destinations.

Why this answer

The strongest suspect is the absence of a usable default router learned through IPv6 router advertisements or equivalent configuration. While local connectivity works because the host can communicate on its own link, remote IPv6 destinations require a next hop off the local segment. Option B is wrong because IPv6-to-IPv4 NAT is unnecessary for native IPv6 communication and would not be the primary cause of off-link failure.

Option C is wrong because a VLAN trunk on the host NIC is for carrying multiple VLANs, not for enabling off-link routing. Option D is wrong because a second global unicast address does not provide a default route; it only adds another local address.

Exam trap

Don't confuse local connectivity success with overall network configuration correctness. Always check for a default route when remote communication fails.

Why the other options are wrong

B

NAT rules are not required for native IPv6 communication and would not be the first suspect when a host cannot reach remote IPv6 destinations.

C

A VLAN trunk on the host NIC relates to Layer 2 segmentation, not to providing a default route for off-link IPv6 traffic.

D

A second global unicast address on the same interface does not supply the missing default route needed to reach off-link destinations.

51
Multi-Selectmedium

Which TWO statements correctly describe the configuration and verification of IPv4 and IPv6 parameters for host connectivity, including default gateway, DNS, and subnet masks?

Select 2 answers
A.The subnet mask determines the DNS server address used by the host.
B.The default gateway must be on the same subnet as the host's IP address.
C.IPv6 hosts can only obtain their IP address via DHCPv6.
D.The command 'ipconfig /all' displays both IPv4 and IPv6 configuration details.
E.A host can reach any remote network if its default gateway is configured with any IP address.
AnswersB, D

For a host to send traffic to a remote network, it must use a default gateway that is reachable on its local subnet.

Why this answer

Option B is correct because a host's default gateway must be on the same subnet to be reachable at Layer 2; otherwise, a circular dependency occurs. Option D is correct because the 'ipconfig /all' command displays both IPv4 and IPv6 configuration details, including IP address, subnet mask, default gateway, and DNS servers. Option A is wrong because the subnet mask determines the network and host portions of an IP address, not the DNS server address.

Option C is wrong because IPv6 hosts can obtain their IP address via SLAAC, DHCPv6, or static configuration; the phrase 'can only' makes it incorrect. Option E is wrong because the default gateway must be reachable (on the same subnet) and configured with an IP address that belongs to a router interface on that subnet, not just any IP address.

Exam trap

Cisco often tests the misconception that IPv6 hosts require DHCPv6 for address assignment, when in fact SLAAC is a common and valid method, and the question's wording 'can only' is the trap that eliminates Option C.

Why the other options are wrong

A

The subnet mask is used to determine the network portion of an IP address and the host portion, not the DNS server address. DNS server addresses are configured separately, either manually or via DHCP.

C

IPv6 hosts can obtain their IP address via Stateless Address Autoconfiguration (SLAAC), which does not require DHCPv6. DHCPv6 is optional and used for stateful configuration or to provide additional parameters.

E

The default gateway must be on the same subnet as the host's IP address; otherwise, the host cannot send Ethernet frames to it because the gateway's MAC address would not be reachable via ARP. An arbitrary IP address would not work.

52
Multi-Selectmedium

Which TWO statements correctly describe the configuration and verification of IPv4 and IPv6 parameters for host connectivity?

Select 2 answers
A.On a Windows host, the default gateway IPv4 address must be on the same subnet as the host's IPv4 address.
B.The IPv6 default gateway can be any global unicast address on the internet.
C.The subnet mask is used to define the host portion of an IPv4 address.
D.A DNS server address can be statically configured on a host or obtained dynamically via DHCP.
E.Configuring a DNS server is mandatory for a host to communicate with any other device on the same subnet.
AnswersA, D

The default gateway must be reachable directly via Layer 2; therefore it must share the same network/subnet as the host.

Why this answer

Option A is correct because for a host to reach outside its subnet, the default gateway's IP must be in the same subnet; otherwise the host cannot ARP for the gateway's MAC and traffic will fail. Option D is correct because DNS server addresses can be set manually or assigned via DHCP. Option B is wrong because IPv6 gateways must be on the same local link, not any global unicast address on the internet.

Option C is wrong because the subnet mask defines the network/subnet portion of an IPv4 address, not the host portion. Option E is wrong because DNS is used for name resolution; local IP communication on the same subnet works without DNS.

Exam trap

Cisco often tests the misconception that a default gateway can be any routable address, but the trap here is that both IPv4 and IPv6 default gateways must be on the same local subnet as the host for Layer 2 reachability.

Why the other options are wrong

B

An IPv6 default gateway must be on the same local link, not just any globally routable address.

C

The subnet mask identifies the network bits, not the host bits; the host portion is the inverse of the mask.

E

DNS resolves names to IPs; hosts on the same subnet can communicate with IP addressing alone, making DNS optional.

53
Multi-Selectmedium

Which three statements about IPv6 routing are correct? (Choose three.)

Select 3 answers
.IPv6 static routes can be configured using the 'ipv6 route' command.
.The next-hop address for a directly attached IPv6 static route can be a link-local address.
.OSPFv3 uses the same basic algorithm as OSPFv2 but is designed for IPv6.
.IPv6 routing is enabled by default on all Cisco routers.
.The default route in IPv6 is represented as ::/128.
.EIGRP for IPv6 uses the same autonomous system number as EIGRP for IPv4 and shares the same routing table.

Why this answer

All three statements are correct. The 'ipv6 route' command is used to configure static routes in IPv6, similar to 'ip route' in IPv4. A directly attached IPv6 static route can indeed use a link-local address as the next hop, which is common for point-to-point interfaces.

OSPFv3 (OSPF for IPv6) uses the same fundamental SPF algorithm and link-state concepts as OSPFv2 but is designed to support IPv6 addressing and runs per-link rather than per-subnet.

Exam trap

Cisco often tests the nuance that a link-local address can be used as a next hop for a directly attached IPv6 static route only if the exit interface is explicitly specified, leading candidates to incorrectly think link-local addresses are never valid next hops.

54
PBQhard

You are connected to the console of R1. The network uses IPv6 with EUI-64. R1's GigabitEthernet0/0 interface has MAC address 001e.4a7b.9c0d. You need to configure an IPv6 address on this interface using EUI-64, with the subnet 2001:db8:abcd:1::/64.

Hints

  • Enable IPv6 globally first if not already done.
  • Use the 'ipv6 address' command with the 'eui-64' keyword.
  • The interface must have IPv6 enabled to use EUI-64.
A.ipv6 address 2001:db8:abcd:1::/64 eui-64
B.ipv6 address 2001:db8:abcd:1::/64
C.ipv6 address 2001:db8:abcd:1::/64 link-local
D.ipv6 enable
AnswerA
solution
! R1
interface GigabitEthernet0/0
ipv6 address 2001:db8:abcd:1::/64 eui-64
ipv6 enable

Why this answer

The 'ipv6 address 2001:db8:abcd:1::/64 eui-64' command configures the IPv6 address using EUI-64, which generates the interface ID from the MAC address. This command alone enables IPv6 on the interface and assigns the global address; the 'ipv6 enable' command is not strictly necessary and is only required if a link-local address is needed without a global address. Option B would configure a static interface ID, not EUI-64.

Option C incorrectly uses the 'link-local' keyword, which is not valid in this context. Option D only enables IPv6 for link-local addressing without assigning a global unicast address.

Exam trap

Remember that EUI-64 requires the 'eui-64' keyword after the prefix. Without it, the address is static. Also, 'ipv6 enable' only creates a link-local address, not a global one.

Why the other options are wrong

B

The command lacks the 'eui-64' keyword, so it does not generate the interface ID from the MAC address.

C

The 'link-local' keyword is used for link-local addresses (fe80::/10), not for global prefixes.

D

The command does not assign the specified subnet prefix; it only activates IPv6 processing.

55
PBQmedium

You are connected to the console of R1. The network uses IPv6 with EUI-64. R1's GigabitEthernet0/0 interface has MAC address 0011.2233.4455. You must configure the interface to generate an IPv6 link-local address using the 'ipv6 enable' command, and also assign a global unicast address 2001:db8:1::/64 using EUI-64. The interface is currently administratively down.

Network Topology
G0/0linkR1SW1

Hints

  • EUI-64 derives the interface ID from the MAC address.
  • The 'ipv6 enable' command generates a link-local address.
  • The interface must be administratively brought up.
A.R1(config-if)# ipv6 enable R1(config-if)# ipv6 address 2001:db8:1::/64 eui-64 R1(config-if)# no shutdown
B.R1(config-if)# ipv6 address fe80::/10 eui-64 R1(config-if)# ipv6 address 2001:db8:1::/64 eui-64 R1(config-if)# no shutdown
C.R1(config-if)# ipv6 address 2001:db8:1::/64 eui-64 R1(config-if)# no shutdown
D.R1(config-if)# ipv6 enable R1(config-if)# ipv6 address 2001:db8:1::1/64 R1(config-if)# no shutdown
AnswerA
solution
! R1
interface GigabitEthernet0/0
ipv6 enable
ipv6 address 2001:db8:1::/64 eui-64
no shutdown

Why this answer

The ipv6 enable command explicitly creates a link-local address as required by the scenario. The global unicast address with the eui-64 keyword automatically derives the interface ID from the MAC address. Option B is incorrect because it tries to manually configure a link-local address with eui-64, which is unnecessary and invalid.

Option C omits the ipv6 enable command, failing the explicit requirement. Option D assigns a static host portion instead of using eui-64.

Exam trap

When the question specifically mandates the ipv6 enable command for link-local generation, do not omit it; simply configuring a global unicast address will also create a link-local address, but it does not meet the stated objective.

Why the other options are wrong

B

Manually configuring a link-local address with the eui-64 keyword is invalid; link-local addresses are automatically generated.

C

This option does not include the required ipv6 enable command, so it does not satisfy the explicit scenario requirement.

D

Uses a static host address (::1/64) instead of the eui-64 keyword, so the interface ID will not be generated from the MAC address.

56
Drag & Dropmedium

Drag and drop the following steps into the recommended order (best practice) to configure IPv4 and IPv6 static routes, a default route, and a floating static route with higher AD as a backup for the default route, then verify with show ip route and show ipv6 route.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps
Order
1Step 1
2Step 2
3Step 3
4Step 4

Why this order

The recommended best-practice order is to configure specific static routes first, then the default route, and finally the floating static route with a higher AD (e.g., 200) so it acts as a backup for the default route. Verification using show ip route and show ipv6 route confirms the routing table. Options that place the default route before specific routes or the floating route before the default are still operational but may cause temporary routing issues or violate the typical progression from specific to general.

Exam trap

The exam trap is that candidates may confuse the order of configuration, especially placing the default route or floating static route before specific static routes. Remember: specific routes first, then default, then backup (floating) with higher AD.

57
PBQhard

You are connected to R1. The network has three routers: R1, R2, and R3. R1's G0/0 is connected to R2's G0/0, and R1's G0/1 is connected to R3's G0/1. The goal is to configure R1 so that it can ping both R2 (192.0.2.2/30) and R3 (2001:db8:1::2/64). Currently, R1 cannot ping R2 due to a wrong subnet mask on R1's G0/0, and R3 is using an IPv6 EUI-64 address but R1 has been given a static IPv6 address that conflicts. Fix both issues and verify connectivity.

Hints

  • Check the subnet mask on G0/0; it should be /30, not /24.
  • R3 uses EUI-64; to avoid duplicate address, R1 should also use EUI-64 on G0/1.
  • After changing the mask, verify the interface is still up and the route is correct.
A.On G0/0, change the subnet mask to 255.255.255.252; on G0/1, remove the static IPv6 address and configure an EUI-64 address.
B.On G0/0, change the IP address to 192.0.2.2/30; on G0/1, change the IPv6 address to 2001:db8:1::2/64.
C.On G0/0, change the subnet mask to 255.255.255.0; on G0/1, change the IPv6 address to 2001:db8:1::1/64 with EUI-64.
D.On G0/0, change the IP address to 192.0.2.2/30; on G0/1, remove the static IPv6 address and configure an EUI-64 address.
AnswerA
solution
! R1
interface GigabitEthernet0/0
ip address 192.0.2.1 255.255.255.252
exit
interface GigabitEthernet0/1
no ipv6 address 2001:db8:1::1/64
ipv6 address 2001:db8:1::/64 eui-64
end

Why this answer

The problem has two issues. First, R1's G0/0 has IP 192.0.2.1 but its subnet mask is incorrectly set to 255.255.255.0 (/24) instead of the required 255.255.255.252 (/30) that matches R2's /30. This mask mismatch causes R1 to misclassify the subnet, preventing successful ping to R2.

The fix is to change the mask to 255.255.255.252. Second, R1's G0/1 is configured with a static IPv6 address 2001:db8:1::1/64, but R3 uses EUI-64 and generates its address as 2001:db8:1::2. This duplicate address risk breaks communication.

The correct solution is to remove the static IPv6 address and enable EUI-64 on G0/1, allowing R1 to derive a unique address from the prefix. Options B and D incorrectly change R1's IPv4 address to 192.0.2.2, which duplicates R2's address. Option B also sets a static IPv6 address of ::2, duplicating R3's address.

Option C changes the mask to /24, which would temporarily allow communication but violates the intended point-to-point /30 design and does not adopt best practices; it also incorrectly applies a static IPv6 address with EUI-64, which is unnecessary and could still conflict.

Exam trap

Trap: Candidates often confuse IP address conflicts with subnet mask mismatches. Here, the mask on G0/0 is wrong, not the IP. For IPv6, they may think any static address works, but EUI-64 is needed to avoid duplication when the neighbor uses it.

Always verify subnet masks match on point-to-point links and use EUI-64 when the neighbor does.

Why the other options are wrong

B

The specific factual error: 192.0.2.2 is already used by R2, causing an IP conflict; static assignment on G0/1 does not guarantee uniqueness.

C

The specific factual error: /24 mask is too large and does not match the /30 subnet; EUI-64 cannot be applied alongside a static address—it replaces the interface ID.

D

The specific factual error: 192.0.2.2 is already assigned to R2, so R1 cannot use it; the correct fix is to adjust the mask, not the IP.

58
PBQhard

You are connected to R1. Configure IPv4 and IPv6 static routes so that R1 can reach the loopback networks on R2 and R3 (203.0.113.0/24 and 2001:db8:1::/48) with proper failover. Ensure that the primary link (G0/0 to R2) is preferred over the backup link (G0/1 to R3) using a floating static route with an appropriate administrative distance. Additionally, configure a default route on R1 for IPv4 and IPv6 so that traffic to unknown destinations is forwarded via the primary link. Troubleshoot the existing configuration to identify and fix a recursive routing failure caused by a wrong next-hop address in one of the static routes.

Network Topology
G0/010.0.0.1/30G0/010.0.0.2/30G0/110.0.1.1/30G0/010.0.1.2/30R1R2R3

Hints

  • Check if the next-hop IP address for the IPv4 static route is reachable via a directly connected interface.
  • The recursive routing failure occurs because the route uses a next-hop that is not in the routing table; consider using an exit interface in the static route.
  • Verify the administrative distance of the floating static route is higher than the primary route's default AD of 1.
A.The recursive routing failure is caused by a missing route to the next-hop network; correct by changing the static route to use an exit interface: `ip route 203.0.113.0 255.255.255.0 GigabitEthernet0/0 10.0.0.2`
B.The floating static route for IPv4 should have an administrative distance of 1 to ensure it is preferred over the primary route.
C.The IPv6 static route to 2001:db8:1::/48 should use a next-hop of 2001:db8:0:1::1 (R1's own interface) to ensure reachability.
D.The default route for IPv4 should be configured with an administrative distance of 200 to match the floating static route.
AnswerA
solution
! R1
configure terminal
ip route 203.0.113.0 255.255.255.0 GigabitEthernet0/0 10.0.0.2
end
copy running-config startup-config

Why this answer

The recursive routing failure occurs because the static route `ip route 203.0.113.0 255.255.255.0 10.0.0.2` requires R1 to have a route to the next-hop network (10.0.0.0/30) in its routing table. Since 10.0.0.0/30 is directly connected via G0/0, the route should install, but if the interface is down or misconfigured, recursion fails. The fix is to specify both the exit interface and next-hop: `ip route 203.0.113.0 255.255.255.0 GigabitEthernet0/0 10.0.0.2`, which avoids recursive lookup.

Option B is wrong because an administrative distance of 1 would make the floating static route equal to the default AD of the primary static route, defeating failover; the floating route should have a higher AD (e.g., 200). Option C is wrong because using R1's own interface address (2001:db8:0:1::1) as next-hop would point the route back to itself, not to R2; the correct next-hop is R2's link-local or global address on G0/0. Option D is wrong because the default route for IPv4 should have the default AD of 1 to be preferred over the floating static route; setting it to 200 would make it equally preferred and could cause routing loops.

Exam trap

The key trap is that candidates may not realize that a static route with a next-hop address will fail if the router does not have a route to that next-hop network. Always verify that the next-hop is reachable via a connected route or use an exit interface to avoid recursive routing issues.

Why the other options are wrong

B

Administrative distance of 1 matches the default AD of a static route, so the floating route would not be less preferred; it needs a higher AD (e.g., 200) to act as a backup.

C

Using R1's own interface IPv6 address as next-hop would create a route pointing to itself, not to R2, and would not reach the loopback network.

D

The default route should use the default administrative distance (1) to remain the primary route; setting it to 200 would make it equal to the floating static route, causing unpredictable behavior.

59
Drag & Dropmedium

Drag and drop the following steps into the correct order to configure OSPFv3 for IPv6 on a Cisco router.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps
Order
1Step 1
2Step 2
3Step 3
4Step 4

Why this order

After entering global config, create the OSPFv3 process, set a router ID, then enable OSPFv3 on the desired interfaces under interface configuration.

Exam trap

Remember that OSPFv3 requires a router ID to be explicitly configured (or derived from an IPv4 address) before enabling it on interfaces. The process must be created first, then the router ID, then interface enablement.

60
PBQhard

You are connected to the console of R1. The network uses IPv6 with EUI-64. R1's GigabitEthernet0/0 has MAC address 0011.2233.4455. You need to configure an IPv6 global unicast address on this interface using EUI-64 format, based on the prefix 2001:db8:acad:1::/64. The interface is currently configured with an IPv4 address only.

Network Topology
G0/0192.168.1.1/24R1SW1

Hints

  • EUI-64 uses the MAC address to form the interface ID.
  • The prefix length is /64.
  • Use the 'ipv6 address' command with the eui-64 option.
A.R1(config-if)# ipv6 address 2001:db8:acad:1:0211:22ff:fe33:4455/64
B.R1(config-if)# ipv6 address 2001:db8:acad:1:0011:22ff:fe33:4455/64
C.R1(config-if)# ipv6 address 2001:db8:acad:1:0211:2233:4455:5566/64
D.R1(config-if)# ipv6 address 2001:db8:acad:1::/64 eui-64
AnswerA
solution
! R1
interface GigabitEthernet0/0
ipv6 address 2001:db8:acad:1::/64 eui-64

Why this answer

The EUI-64 process inserts FF:FE in the middle of the MAC and flips the U/L bit. The command configures the IPv6 address automatically based on the prefix and the interface MAC.

Exam trap

The exam trap is that candidates often forget to flip the U/L bit or confuse the EUI-64 process with simply inserting FF:FE. Also, some may provide the configuration command instead of the actual address. Always remember: flip the seventh bit of the first byte (change 00 to 02, 01 to 03, etc.) and insert FF:FE after the first 24 bits.

Why the other options are wrong

B

The specific factual error is that the U/L bit was not flipped. The EUI-64 process requires flipping the seventh bit of the first byte of the MAC address.

C

The specific factual error is that FF:FE was not inserted between the first and second halves of the MAC address. The EUI-64 format requires the insertion of FF:FE.

D

The specific factual error is that the question asks for the resulting IPv6 address, not the configuration command. The command 'ipv6 address ... eui-64' is used to enable EUI-64, but the answer should be the actual address.

61
Multi-Selectmedium

Which TWO statements about IPv4 and IPv6 static routes, including floating static routes, are correct?

Select 2 answers
A.A floating static route uses a higher administrative distance than the primary route to provide backup connectivity.
B.An IPv6 static route using a link-local next-hop address must include both the next-hop address and the outgoing interface.
C.In IPv6, the default route prefix is 0.0.0.0/0.
D.For a floating static route to be installed in the routing table, it must have an administrative distance lower than that of the primary route.
E.An IPv4 static route will only be inserted into the routing table if its next-hop IP address belongs to a directly connected subnet.
AnswersA, B

Floating static routes are backup routes; they are configured with an AD higher than the primary route so they are only used when the primary fails.

Why this answer

Option A is correct because a floating static route is configured with a higher administrative distance (AD) than the primary route. This ensures the floating route is only used when the primary route fails, as the router prefers routes with lower AD values. For example, if the primary route has an AD of 1 (static route default), the floating static route might be set to AD 200, making it a backup.

Exam trap

Cisco often tests the distinction between IPv4 and IPv6 default route prefixes (0.0.0.0/0 vs ::/0) and the requirement for specifying the outgoing interface with IPv6 link-local next-hop addresses, which candidates frequently confuse.

Why the other options are wrong

C

0.0.0.0/0 is the IPv4 default route; the correct IPv6 default prefix is ::/0.

D

A floating static route must have a higher AD, not lower, so that it is less preferred and only installed when the primary (lower AD) route is lost.

E

Cisco IOS requires the next-hop to be reachable, but it does not have to be directly connected. As long as a route exists to reach that next-hop (even recursively), the static route can be installed.

62
PBQhard

You are connected to R1, a Cisco router that must establish OSPFv3 adjacency with R2 over its GigabitEthernet0/0 link. The link uses IPv6 addresses 2001:db8:1:1::1/64 on R1 and 2001:db8:1:1::2/64 on R2. R1 currently has IPv6 unicast routing enabled but no OSPFv3 process configured. Configure R1 so that it forms a full OSPFv3 neighbor relationship with R2 and installs the loopback network 2001:db8:2:2::/64 (advertised by R2) into its IPv6 routing table.

Network Topology
G0/02001:db8:1:1::1/64G0/02001:db8:1:1::2/64linkR1R2

Hints

  • OSPFv3 requires a router-id; use 1.1.1.1 for simplicity.
  • Activate OSPFv3 on the interface with the correct process ID and area.
  • Verify adjacency shows FULL state and the route appears in the IPv6 routing table.
A.ipv6 router ospf 1 router-id 1.1.1.1 interface GigabitEthernet0/0 ipv6 ospf 1 area 0
B.ipv6 router ospf 1 router-id 1.1.1.1 interface GigabitEthernet0/0 ipv6 ospf 1 area 0 network 2001:db8:1:1::0/64 area 0
C.ipv6 router ospf 1 router-id 1.1.1.1 interface GigabitEthernet0/0 ipv6 ospf 1 area 0 ipv6 ospf network point-to-point
D.ipv6 router ospf 1 router-id 1.1.1.1 interface GigabitEthernet0/0 ipv6 ospf 1 area 0 ipv6 ospf hello-interval 5
AnswerA
solution
! R1
ipv6 router ospf 1
router-id 1.1.1.1
interface GigabitEthernet0/0
ipv6 ospf 1 area 0

Why this answer

R1 requires OSPFv3 configuration: enable the process with 'ipv6 router ospf 1', set a router-id, then enable OSPFv3 on the interface with 'ipv6 ospf 1 area 0'. Option B incorrectly attempts to use a network command (OSPFv2 syntax). Option C sets a point-to-point network type, which on a broadcast link will mismatch with R2's default broadcast type and prevent adjacency.

Option D changes the hello interval to 5, causing a timer mismatch and adjacency failure.

Exam trap

Do not confuse OSPFv2 'network' commands with OSPFv3 interface configuration. Also, avoid adding unnecessary interface parameters that may disrupt adjacency.

Why the other options are wrong

B

The 'network' command is for OSPFv2 and does not exist in OSPFv3; interface configuration is done via interface commands.

C

Setting the network type to point-to-point changes the OSPF link type; without matching configuration on R2, adjacency will fail.

D

Mismatched hello intervals prevent OSPF neighbor relationships from forming.

63
MCQmedium

Which IPv6 protocol function replaces ARP?

A.DHCPv6
B.Neighbor Discovery
AnswerB

Correct. Neighbor Discovery replaces ARP in IPv6 networks.

Why this answer

IPv6 uses Neighbor Discovery Protocol to resolve Layer 3-to-Layer 2 information and perform related local-link functions such as router discovery and address resolution.

Exam trap

Be careful not to confuse protocols that manage IP addresses or routing with those that resolve addresses.

Why the other options are wrong

A

DHCPv6 is not a protocol that replaces ARP; instead, it is used for assigning IP addresses and configuration information to IPv6 devices. ARP is replaced by the Neighbor Discovery Protocol in IPv6, which performs similar functions for address resolution.

C

EUI-64 is not a protocol but a method for generating IPv6 interface identifiers. It does not perform the function of resolving link-layer addresses like ARP does in IPv4.

D

SLAAC (Stateless Address Autoconfiguration) is a method for automatically configuring IPv6 addresses but does not perform the function of resolving link-layer addresses like ARP does in IPv4. Therefore, it cannot replace ARP in IPv6.

64
Drag & Dropmedium

Drag and drop the following steps into the correct order to configure OSPFv3 for IPv6 on a Cisco IOS-XE router, including enabling IPv6 routing, setting up the OSPFv3 process, enabling it on an interface, and verifying the adjacency and routes.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps
Order
1Step 1
2Step 2
3Step 3
4Step 4

Why this order

This order follows the logical workflow: first enable IPv6 globally, then configure the OSPFv3 process, apply it to the interface, and finally verify the results.

Exam trap

Students often forget to enable 'ipv6 unicast-routing' globally or try to enable OSPFv3 on an interface before explicitly creating the OSPF process, which may not fail but can result in an automatically assigned router ID.

65
PBQhard

You are connected to R1 via console. The network consists of R1, R2, and a multilayer switch MLS1. R1's GigabitEthernet0/0 connects to MLS1's GigabitEthernet1/0/1 (VLAN 10), and MLS1's GigabitEthernet1/0/2 connects to R2's GigabitEthernet0/0. The goal is to enable IPv6 communication between R1 and R2 across the layer-3 switch. Currently, R1 and R2 cannot ping each other's IPv6 addresses. Configure R1's G0/0 with the IPv6 prefix 2001:db8:1:10::/64 using EUI-64, and R2's G0/0 with static IPv6 address 2001:db8:1:10::2/64. Also ensure MLS1 has IPv6 routing enabled and an IPv6 address on VLAN 10 (2001:db8:1:10::3/64). Troubleshoot and fix any layer-2 or layer-3 issues preventing connectivity.

Network Topology
G0/0G1/0/1G1/0/1G0/0SiMLS1R1R2

Hints

  • R1's G0/0 has no IPv6 address configured.
  • The correct command uses the 'eui-64' keyword to generate the interface ID from the MAC.
  • After configuration, R1 should be able to ping the other IPv6 addresses.
A.Configure 'ipv6 address 2001:db8:1:10::/64 eui-64' on R1's G0/0 interface.
B.Enable IPv6 routing on R1 with 'ipv6 unicast-routing'.
C.Configure 'ipv6 address 2001:db8:1:10::1/64' on R1's G0/0 interface (without EUI-64).
D.Change the VLAN on MLS1's G1/0/1 to match R1's VLAN.
AnswerA
solution
! R1
interface GigabitEthernet0/0
ipv6 address 2001:db8:1:10::1/64 eui-64
end

Why this answer

R1 has no IPv6 address configured on G0/0. The required prefix is 2001:db8:1:10::/64 using EUI-64, which generates the interface ID from the MAC address. The command 'ipv6 address 2001:db8:1:10::/64 eui-64' must be entered in interface configuration mode.

Additionally, MLS1 has IPv6 routing enabled (as seen by the connected route), but R1's interface is missing the IPv6 address. After configuration, R1 will be able to ping R2 and MLS1. No other changes are needed because R2 and MLS1 are correctly configured.

Exam trap

Do not confuse global IPv6 routing enablement with interface address configuration. The presence of a connected route indicates routing is enabled; the missing piece is the interface address. Also, pay attention to specific requirements like EUI-64.

Why the other options are wrong

B

IPv6 unicast-routing is already enabled; the problem is at the interface level.

C

The requirement specifies EUI-64; omitting it results in a static address that does not match the intended configuration.

D

The VLAN configuration is correct; no change is needed.

66
Multi-Selectmedium

Which TWO statements correctly describe IPv4 and IPv6 host configuration?

Select 2 answers
A.APIPA assigns an IPv4 address in the 169.254.0.0/16 range when a DHCP server is unavailable.
B.IPv6 link-local addresses are always assigned using EUI-64 and start with FE80::/10.
C.EUI-64 is used to generate the network prefix of an IPv6 address from the interface's MAC address.
D.A host can have only one default gateway configured at a time for both IPv4 and IPv6.
E.The ipconfig command on Windows can display both IPv4 and IPv6 addresses, subnet masks, default gateways, and DNS servers.
AnswersA, E

APIPA (Automatic Private IP Addressing) automatically assigns an address from 169.254.0.0/16 when DHCP fails, allowing local communication without a DHCP server.

Why this answer

Option A is correct because APIPA (Automatic Private IP Addressing) automatically assigns an IPv4 address from the 169.254.0.0/16 range when a DHCP server is unavailable, enabling local subnet communication without manual configuration. Option E is correct because the ipconfig command on Windows displays both IPv4 and IPv6 addresses, subnet masks, default gateways, and DNS servers. Option B is incorrect because while IPv6 link-local addresses start with FE80::/10, they are not always assigned using EUI-64; they can also be randomly generated (privacy extensions) or manually configured.

Option C is incorrect because EUI-64 generates the interface identifier (host portion) of an IPv6 address from the MAC address, not the network prefix — the prefix is provided via SLAAC, DHCPv6, or manual configuration. Option D is incorrect because a host can have multiple default gateways configured for redundancy, though only one is active at a time per routing table; additionally, IPv4 and IPv6 default gateways are independent and can coexist.

Exam trap

Cisco often tests the misconception that EUI-64 generates the network prefix of an IPv6 address, when in fact it generates only the interface identifier (host portion), while the network prefix is assigned via SLAAC, DHCPv6, or manual configuration.

Why the other options are wrong

B

The statement incorrectly claims that link-local addresses are always assigned using EUI-64.

C

The statement confuses the role of EUI-64; it creates the interface ID, not the network prefix.

D

The statement is too restrictive; multiple default gateways can be configured, especially in multi-homed hosts.

67
Multi-Selectmedium

Which TWO statements about IPv4 and IPv6 ACLs are true?

Select 2 answers
A.Standard IPv4 ACLs use numbers in the range 100-199.
B.Extended IPv4 ACLs should be placed as close to the source as possible to minimize unnecessary traffic on the network.
C.IPv6 ACLs are always named and can filter traffic based on source and destination IPv6 addresses, as well as protocol types.
D.Standard IPv4 ACLs filter only the source IP address and are best placed close to the source to be most effective.
E.Numbered ACLs allow individual access control entries (ACEs) to be deleted without removing the entire ACL.
AnswersB, C

Extended ACLs can match traffic with great specificity (source, destination, protocol, ports). Placing them near the source drops unwanted packets early, saving bandwidth and processing on downstream devices.

Why this answer

Option B is correct because extended IPv4 ACLs filter on source and destination IP addresses, ports, and protocols, so placing them as close to the source as possible prevents unwanted traffic from traversing the network, reducing bandwidth waste and security risks. This is a best practice for extended ACLs, unlike standard ACLs which should be placed close to the destination.

Exam trap

Cisco often tests the placement rule reversal—candidates confuse standard ACL placement (close to destination) with extended ACL placement (close to source), or mix up the number ranges for standard vs. extended ACLs.

Why the other options are wrong

A

The number range 100–199 is used for extended ACLs, not standard ones.

D

The placement advice is reversed: standard ACLs belong near the destination, not the source.

E

This is a common misconception; the ability to delete individual ACEs is a feature of named ACLs, not numbered.

68
MCQhard

An enterprise network uses an IPv6 dual-stack design. Router R1 has a primary default route ::/0 via 2001:db8:1::1 with AD 1 and a floating default route with AD 10 via link-local address fe80::2. After the primary link fails, the floating route fails to install, and R1 loses all external connectivity. The administrator confirms the backup interface is up/up.

A.The administrative distance of the backup route is 10, so it is not installed while the primary route still exists.
B.The floating static route uses a link-local next-hop but does not specify an exit interface, making the route incomplete.
C.The floating static route will be installed only if the primary link is administratively shut down, not after a physical failure.
D.The next-hop fe80::2 is unreachable because IPv6 neighbor discovery is disabled on the backup interface.
AnswerB

A static route with a link-local next-hop requires an exit interface to be valid; omitting it causes the route to stay out of the routing table.

Why this answer

Option B is correct because a floating static route using a link-local next-hop (fe80::2) must also specify an exit interface (e.g., GigabitEthernet0/1) to be considered complete. Without the exit interface, the router cannot determine which interface to use for neighbor discovery, leaving the route incomplete and unable to be installed into the routing table. This is a common requirement for IPv6 static routes with link-local addresses, as the next-hop is not globally unique.

Exam trap

Cisco often tests the requirement that IPv6 static routes with link-local next-hops must include an exit interface, tricking candidates into thinking the route is valid without it or misattributing the failure to administrative distance or interface status.

Why the other options are wrong

A

A floating static route with a higher AD is installed when the lower AD route is removed because of interface failure.

C

Floating static routes do not distinguish between physical and administrative interface down events; the primary route is removed in both cases.

D

The immediate cause is the missing exit interface; neighbor discovery configuration does not make an incomplete static route valid.

69
PBQhard

You are connected to R1. Configure IPv4 and IPv6 static routes so that R1 can reach the loopback networks on R2 (192.0.2.0/24 and 2001:db8:1::/32) via G0/0. Also, configure a floating static default route via G0/1 (next-hop 203.0.113.2) with an administrative distance of 200 so that it is only used if the directly connected default route fails. The current configuration has a recursive routing failure for the IPv6 route and a missing default route.

Network Topology
G0/010.0.0.1/30G0/010.0.0.2/30linkR1R2

Hints

  • Check the IPv6 next-hop: is it directly connected?
  • Floating static routes require a higher administrative distance than the primary route.
  • Use the exit interface for the IPv6 static route to avoid recursive lookup failure.
A.ip route 0.0.0.0 0.0.0.0 203.0.113.2 200 ipv6 route 2001:db8:1::/32 GigabitEthernet0/0
B.ip route 0.0.0.0 0.0.0.0 203.0.113.2 200 ipv6 route 2001:db8:1::/32 2001:db8:0:1::2
C.ip route 0.0.0.0 0.0.0.0 203.0.113.2 ipv6 route 2001:db8:1::/32 GigabitEthernet0/0
D.ip route 0.0.0.0 0.0.0.0 203.0.113.2 200 ipv6 route 2001:db8:1::/32 2001:db8:0:1::2 200
AnswerA
solution
! R1
no ipv6 route 2001:db8:1::/32 2001:db8:0:1::2
ipv6 route 2001:db8:1::/32 GigabitEthernet0/0
no ip route 0.0.0.0 0.0.0.0 203.0.113.2
ip route 0.0.0.0 0.0.0.0 203.0.113.2 200

Why this answer

The IPv6 static route uses a next-hop address (2001:db8:0:1::2) that is not directly connected; the router will attempt recursive lookup but fails because there is no route to that subnet. The fix is to use the exit interface (GigabitEthernet0/0) instead. The IPv4 default route is present but has AD 1, which prevents it from being a floating route; change it to AD 200 so it only activates when the connected default route (if any) is down.

The task did not require a connected default route, so the floating static is the only default.

Exam trap

Watch out for recursive routing failures when using a next-hop address that is not directly connected. For floating static routes, always specify a higher AD than the primary route's AD.

Why the other options are wrong

B

The IPv6 next-hop 2001:db8:0:1::2 is not reachable via a directly connected network; the router cannot resolve it.

C

The administrative distance must be set to a higher value (e.g., 200) to make it a floating route.

D

The IPv6 route fails due to recursive lookup failure; adding AD does not fix the next-hop issue.

70
MCQhard

An IPv6 host has a global unicast address and a correct default route learned from a router advertisement, but the next-hop entry shown on the host uses a link-local address rather than a global unicast address. What is the best explanation?

A.IPv6 hosts commonly use the router’s link-local address as the next hop on the local segment.
B.The host has learned the wrong default route because IPv6 gateways must always be global unicast.
C.The host can reach only local destinations when the next hop is link-local.
D.The router advertisement has failed because it did not provide a MAC address.
AnswerA

This is correct because IPv6 next-hop behavior often relies on the router’s link-local address on the local link.

Why this answer

That behavior is normal in IPv6. In practical terms, the host only needs to reach the router on the local segment, so it uses the router’s link-local address as the next-hop target. The packet still leaves the local link toward remote destinations, but the immediate neighbor on that link is identified by link-local addressing.

This is an important IPv6 concept because many people assume the default gateway must be a globally routable address. It does not. On the local link, the host is really forwarding to its directly attached router interface, and the router’s link-local address is enough for that local handoff.

Exam trap

Don't assume that a default gateway must be a global unicast address in IPv6; link-local addresses are used for local communication.

Why the other options are wrong

B

This option is incorrect because IPv6 gateways do not have to be global unicast; link-local addresses are valid for routing within the local network segment. The host can use the link-local address of the router as the next hop for packets destined to other networks.

C

This option is incorrect because a host with a link-local next hop can still reach global unicast addresses, as link-local addresses are used only for communication within the same local network segment.

D

This option is wrong because a router advertisement does not need to provide a MAC address for the next-hop link-local address to be valid; link-local addresses are inherently usable for local communication without MAC address specification.

71
PBQhard

You are connected to R1. Configure IPv4 and IPv6 addressing on R1's interfaces so that R1 can reach R2's loopback0 (192.0.2.1/32) and R2's IPv6 loopback0 (2001:db8:1::1/64). R1 has a misconfigured subnet mask on G0/0 and is missing its default gateway. Additionally, R1 has a duplicate IPv4 address on G0/1 that must be corrected. Use EUI-64 for R1's IPv6 link-local address on G0/0 and static IPv6 for the global unicast address on G0/1.

Network Topology
G0/010.0.0.1/30G0/010.0.0.2/30linkR1R2

Hints

  • Check the subnet mask on G0/0 — it should match the link between R1 and R2.
  • R1 needs a default route to reach networks beyond R2.
  • G0/1's IP address conflicts with R2's G0/1 — use a different subnet.
A.Change G0/0 mask to /30, add default route via 10.0.0.2, change G0/1 IP to 192.0.2.2/30, enable IPv6 on G0/0 with EUI-64 link-local, assign 2001:db8:2::1/64 to G0/1
B.Change G0/0 mask to /24, add default route via 10.0.0.1, change G0/1 IP to 10.0.0.6/30, enable IPv6 on G0/0 with EUI-64 link-local, assign 2001:db8:1::1/64 to G0/1
C.Change G0/0 mask to /30, add default route via 10.0.0.1, change G0/1 IP to 192.0.2.2/30, enable IPv6 on G0/0 with EUI-64 link-local, assign 2001:db8:2::1/64 to G0/1
D.Change G0/0 mask to /30, add default route via 10.0.0.2, change G0/1 IP to 10.0.0.6/30, enable IPv6 on G0/0 with EUI-64 link-local, assign 2001:db8:2::1/64 to G0/1
AnswerA
solution
! R1
interface gigabitethernet0/0
ip address 10.0.0.1 255.255.255.252
ipv6 enable
ipv6 address fe80::/64 eui-64
exit
interface gigabitethernet0/1
ip address 192.0.2.2 255.255.255.252
ipv6 address 2001:db8:2::1/64
exit
ip route 0.0.0.0 0.0.0.0 10.0.0.2

Why this answer

R1 cannot reach R2 because G0/0 has a wrong subnet mask (/24 instead of /30) and no default gateway. Also, G0/1 has a duplicate IPv4 address (10.0.0.5/30 conflicts with R2's G0/1). To fix: change G0/0 mask to /30, add a default route via 10.0.0.2, assign a unique IP to G0/1 (e.g., 192.0.2.2/30), enable IPv6 on G0/0 with EUI-64 link-local, and assign a static global unicast address to G0/1 (2001:db8:2::1/64).

Exam trap

Watch out for common mistakes: using the wrong subnet mask (e.g., /24 instead of /30), pointing the default gateway to the wrong next-hop (e.g., 10.0.0.1 instead of 10.0.0.2), and failing to resolve duplicate IPs by moving to a different subnet. Also, ensure IPv6 addresses are unique and not conflicting with other devices.

Why the other options are wrong

B

The subnet mask on G0/0 must match the connected network (/30), not /24. The default gateway should point to the neighbor's IP (10.0.0.2). The new G0/1 IP must be in a different subnet to avoid duplication.

The IPv6 global unicast address on G0/1 must be unique and not conflict with R2's loopback.

C

The default gateway must be the IP address of the directly connected neighbor (R2's G0/0), which is 10.0.0.2, not 10.0.0.1.

D

The IP address 10.0.0.6/30 is in the same subnet as R2's G0/1 (10.0.0.5/30), so it does not resolve the duplicate address conflict. A different subnet must be used.

72
PBQhard

You are connected to R1, a router that must establish OSPFv3 adjacency with R2 over the directly connected link G0/0. The current configuration is incomplete: OSPFv3 process is configured but not enabled on the interface, and global IPv6 unicast routing is missing. Configure R1 so that it becomes an OSPFv3 neighbor with R2 and learns the loopback route 2001:db8:1:2::/64 via OSPFv3. Then verify neighbor state and routing table.

Network Topology
G0/02001:db8:0:1::1/64G0/02001:db8:0:1::2/64linkR1R2

Hints

  • OSPFv3 requires IPv6 unicast routing to be enabled globally before it can operate.
  • OSPFv3 is enabled on an interface using the 'ipv6 ospf <process-id> area <area-id>' command.
  • Without the interface-level command, the router will not send hellos and will not form an adjacency.
A.Enable IPv6 unicast routing globally and activate OSPFv3 on GigabitEthernet0/0 with the command 'ipv6 ospf 1 area 0'.
B.Enable IPv6 unicast routing globally and configure OSPFv3 process 1 with the 'network' command under the OSPFv3 router configuration mode.
C.Enable IPv6 unicast routing globally and configure OSPFv3 process 1 with the 'router-id' command to ensure adjacency.
D.Enable IPv6 unicast routing globally and configure OSPFv3 process 1 with the 'passive-interface default' command to allow adjacency.
AnswerA
solution
! R1
ipv6 unicast-routing
interface GigabitEthernet0/0
ipv6 ospf 1 area 0

Why this answer

R1 is missing two critical configurations: global IPv6 unicast routing must be enabled with 'ipv6 unicast-routing', and OSPFv3 must be activated on GigabitEthernet0/0 using 'ipv6 ospf 1 area 0' under the interface. Without these, R1 cannot send or receive OSPFv3 hellos, so no adjacency forms and routes are not exchanged. After applying both commands, the neighbor state becomes FULL and the remote loopback appears in the IPv6 routing table.

Exam trap

The exam trap is that OSPFv3 configuration differs from OSPFv2: OSPFv3 does not use network statements under the router process; instead, it is enabled directly on the interface. Additionally, IPv6 unicast routing must be globally enabled before OSPFv3 can function. Candidates often forget one of these two steps.

Why the other options are wrong

B

The specific factual error is that OSPFv3 uses interface-level configuration, not network statements under the OSPF process.

C

The specific factual error is that setting a router ID alone does not activate OSPFv3 on an interface; OSPFv3 must be explicitly enabled on the interface.

D

The specific factual error is that 'passive-interface default' would actually prevent adjacency, not help form it.

73
PBQmedium

You are connected to R1 via console. R1 is a new router connecting two subnets: 192.168.1.0/24 on G0/0 and 192.168.2.0/24 on G0/1. You need to configure IPv6 static routes so that hosts on these subnets can reach the IPv6 Internet via R2 (2001:db8:1::2). R1's G0/0 has IPv6 address 2001:db8:1::1/64, and R2 is the next-hop. Also configure a default IPv6 route toward R2.

Network Topology
G0/02001:db8:1::1/64G0/02001:db8:1::2/64G0/12001:db8:2::1/64R1R2internal

Hints

  • The default IPv6 route uses the prefix ::/0.
  • The next-hop address must be reachable via a directly connected interface.
  • No need to create static routes for directly connected networks.
A.ipv6 route ::/0 2001:db8:1::2
B.ipv6 route 2001:db8:1::/64 2001:db8:1::2
C.ipv6 route ::/0 g0/0
D.ipv6 route 2001:db8:1::2/128 g0/0
AnswerA
solution
! R1
ipv6 route ::/0 2001:db8:1::2

Why this answer

A default IPv6 static route with prefix ::/0 points to the next-hop 2001:db8:1::2, which correctly forwards all traffic not in the local routing table to R2 for Internet reachability. Option B is wrong because it creates a static route for the directly connected network 2001:db8:1::/64, which is already in the routing table and unnecessary. Option C fails because on Ethernet interfaces, a static route must specify a next-hop IP address, not just an exit interface.

Option D is incorrect because it creates a host route to 2001:db8:1::2, which is a directly connected address, and does not provide a default route.

Exam trap

Be careful to distinguish between a default route (::/0) and a specific route. Also, remember that on Ethernet interfaces, static routes must specify a next-hop IP address, not just an exit interface. Directly connected networks do not require static routes.

Why the other options are wrong

B

Creates a static route for a directly connected network that is already in the routing table, which is unnecessary.

C

On Ethernet interfaces, a static route must specify a next-hop IP address; specifying only an exit interface does not work for multi-access networks.

D

Creates a host route for the next-hop address itself, which is directly connected and already reachable, and does not provide a default route.

74
MCQhard

Two directly connected routers running OSPFv3 do not form an adjacency. Both interfaces have valid IPv6 addresses and can ping each other using link-local addresses. What is the most likely cause?

A.The interfaces are assigned to different OSPFv3 areas.
B.The routers need global unicast addresses before OSPFv3 can run.
C.The router IDs must be identical before adjacency can form.
D.The link-local addresses must be learned from DHCPv6.
AnswerA

This is correct because OSPFv3 neighbors on the same link must agree on the area.

Why this answer

The most likely cause is an OSPFv3 area mismatch on the interface. In practical terms, OSPFv3 still requires neighbors on the same link to agree on the area assignment, just as OSPF for IPv4 does. Link-local reachability alone is not enough to form an adjacency. The protocol parameters still have to match.

This is an important IPv6 routing point because people sometimes assume that successful IPv6 ping means the routing protocol should automatically work. It does not. Adjacency depends on protocol alignment, not just basic connectivity.

Exam trap

A frequent exam trap is to assume that because two routers can ping each other using IPv6 link-local addresses, their OSPFv3 adjacency should automatically form. This mistake overlooks the critical requirement that both routers must be configured in the same OSPFv3 area. Candidates might also incorrectly believe that global unicast addresses are necessary for OSPFv3 adjacency or that router IDs must be identical.

These misconceptions lead to selecting incorrect answers, as adjacency depends on matching area IDs and unique router IDs, not on global addressing or identical IDs.

Why the other options are wrong

B

Incorrect. OSPFv3 forms adjacencies using IPv6 link-local addresses, so global unicast addresses are not mandatory for adjacency formation or neighbor discovery.

C

Incorrect. Router IDs must be unique identifiers for OSPF routers. Identical router IDs cause adjacency failure, but they do not need to be identical to form adjacency.

D

Incorrect. IPv6 link-local addresses are automatically configured on interfaces and do not require DHCPv6. OSPFv3 uses these link-local addresses for neighbor communication.

75
PBQhard

You are connected to R1 via console. Configure OSPFv3 for IPv6 on R1 and R2 so that IPv6 loopback interfaces on both routers can communicate. R1's GigabitEthernet0/0 and R2's GigabitEthernet0/1 are directly connected. Ensure OSPFv3 is enabled on the correct interfaces and verify neighbors and routes.

Network Topology
G0/02001:db8:12::1/64G0/12001:db8:12::2/64linkR1R2

Hints

  • OSPFv3 must be enabled per-interface, not globally.
  • Use the same OSPFv3 process ID and area on both routers.
  • Check which interfaces are physically connected between the routers.
A.Enable OSPFv3 on R1's GigabitEthernet0/0 and Loopback0, and on R2's GigabitEthernet0/1 and Loopback0.
B.Enable OSPFv3 only on the loopback interfaces of both routers.
C.Enable OSPFv3 on R1's GigabitEthernet0/0 and R2's GigabitEthernet0/1 only, without loopbacks.
D.Enable OSPFv3 on R1's Loopback0 and R2's GigabitEthernet0/1 only.
AnswerA
solution
! R1
interface GigabitEthernet0/0
ipv6 ospf 1 area 0
interface Loopback0
ipv6 ospf 1 area 0

! R2
interface GigabitEthernet0/1
ipv6 ospf 1 area 0
interface Loopback0
ipv6 ospf 1 area 0

Why this answer

The issue is that OSPFv3 is not enabled on the interfaces. On R1, OSPFv3 must be enabled on GigabitEthernet0/0 (the link to R2) and Loopback0 (to advertise the loopback). On R2, OSPFv3 must be enabled on GigabitEthernet0/1 (the link to R1) and Loopback0.

After enabling OSPFv3 on the correct interfaces, the neighbor adjacency forms and routes are exchanged.

Exam trap

A common trap is to enable OSPFv3 only on the link interfaces or only on the loopbacks. Remember that OSPFv3 must be enabled on every interface that needs to be advertised or that participates in neighbor discovery. Also, note that OSPFv3 uses 'ipv6 ospf <process-id> area <area-id>' under the interface, not the network statement used in OSPFv2.

Why the other options are wrong

B

OSPFv3 requires the link interface to be enabled to form neighbors; loopback-only configuration results in no neighbor relationship.

C

OSPFv3 must be enabled on the loopback interfaces to advertise their prefixes; otherwise, they remain unknown to the neighbor.

D

Both routers must have OSPFv3 enabled on the link interface to form an adjacency, and both loopbacks must be enabled to advertise their prefixes.

Page 1 of 2 · 91 questions totalNext →

Ready to test yourself?

Try a timed practice session using only IPV6 questions.