- A
EIGRP will send and receive updates only on GigabitEthernet0/0.
All interfaces are passive by default, but Gi0/0 is explicitly enabled for EIGRP updates.
- B
EIGRP will send updates on all interfaces except GigabitEthernet0/0.
Why wrong: The passive-interface default makes all interfaces passive; the 'no passive-interface' overrides that for Gi0/0, so only Gi0/0 sends updates.
- C
EIGRP will not send any updates because the network statement is incorrect.
Why wrong: The network statement is valid (wildcard mask 0.255.255.255 matches 10.0.0.0/8).
- D
EIGRP will form adjacencies on all interfaces that have an IP address in the 10.0.0.0/8 range.
Why wrong: The passive-interface default prevents adjacencies on all interfaces except those with 'no passive-interface'.
Quick Answer
The correct answer is that EIGRP will send and receive updates only on GigabitEthernet0/0. This is because the `passive-interface default` command globally suppresses all EIGRP hello packets and neighbor formation on every interface, making them passive by default. The subsequent `no passive-interface GigabitEthernet0/0` command explicitly overrides that default for that single interface, allowing EIGRP to form adjacencies and exchange routing information only there. On the ENCOR 350-401 exam, this configuration tests your understanding of how EIGRP’s passive-interface logic interacts with the network statement—a common trap is assuming the network command alone controls where updates are sent, when in fact the passive-interface default takes precedence. Remember the key distinction: `passive-interface default` is a global lockdown, and `no passive-interface` is a targeted unlock. A helpful memory tip is “default denies all, no permits one”—think of it as a firewall rule where the default action is to block, and you explicitly allow only the interfaces you need.
CCNP SD-Access Architecture Practice Question
This 350-401 practice question tests your understanding of sd-access architecture. This is a configuration task: choose the command set that satisfies every stated requirement. Small differences — like 'secret' vs 'password' or 'transport input ssh' vs 'all' — change whether the answer is correct. After answering, compare your reasoning against the explanation and wrong-answer breakdown below. Once you have made your selection, read the full explanation to reinforce the concept and understand why each distractor is designed to mislead on exam day.
Consider the following configuration:
router eigrp 100 network 10.0.0.0 0.255.255.255 passive-interface default no passive-interface GigabitEthernet0/0
Which statement is true about this EIGRP configuration?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
EIGRP will send and receive updates only on GigabitEthernet0/0.
The `passive-interface default` command sets all interfaces to passive by default, preventing EIGRP from sending or receiving hello packets (and thus updates) on them. The `no passive-interface GigabitEthernet0/0` command then overrides this default for that specific interface, allowing EIGRP to send and receive updates only on GigabitEthernet0/0. The network statement 10.0.0.0 0.255.255.255 enables EIGRP on any interface matching the 10.0.0.0/8 range, but the passive-interface logic restricts actual adjacency formation.
Key principle: Answer the scenario, not the keyword: identify the specific constraint before choosing the most familiar-sounding option.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
EIGRP will send and receive updates only on GigabitEthernet0/0.
Why this is correct
All interfaces are passive by default, but Gi0/0 is explicitly enabled for EIGRP updates.
Related concept
Read the scenario before looking for a memorised answer.
- ✗
EIGRP will send updates on all interfaces except GigabitEthernet0/0.
Why it's wrong here
The passive-interface default makes all interfaces passive; the 'no passive-interface' overrides that for Gi0/0, so only Gi0/0 sends updates.
- ✗
EIGRP will not send any updates because the network statement is incorrect.
Why it's wrong here
The network statement is valid (wildcard mask 0.255.255.255 matches 10.0.0.0/8).
- ✗
EIGRP will form adjacencies on all interfaces that have an IP address in the 10.0.0.0/8 range.
Why it's wrong here
The passive-interface default prevents adjacencies on all interfaces except those with 'no passive-interface'.
Common exam traps
Common exam trap: answer the scenario, not the keyword
Cisco often tests the interaction between `passive-interface default` and `no passive-interface` to see if candidates understand that the default passive setting overrides all interfaces except those explicitly enabled, rather than the reverse.
Detailed technical explanation
How to think about this question
In EIGRP, the `passive-interface` command prevents the interface from sending or receiving hello packets, which are required for neighbor discovery and adjacency maintenance. The `passive-interface default` global command is a Cisco IOS feature that simplifies security by making all interfaces passive unless explicitly allowed, commonly used in hub-and-spoke topologies to prevent unwanted neighbor relationships on LAN interfaces. Note that even with passive interfaces, EIGRP will still advertise the connected subnet via the network statement, but no routing updates or hellos are exchanged.
KKey Concepts to Remember
- Read the scenario before looking for a memorised answer.
- Find the constraint that changes the correct option.
- Eliminate answers that are true in general but not in this case.
TExam Day Tips
- Watch for words such as best, first, most likely and least administrative effort.
- Review why wrong options are wrong, not only why the correct option is correct.
Key takeaway
Answer the scenario, not the keyword: identify the specific constraint before choosing the most familiar-sounding option.
Real-world example
How this comes up in practice
A network engineer at a university connects two campus buildings via a fibre link. Both routers run OSPF, but no adjacency forms — even though both routers can ping each other. The engineer finds one router is in area 0 and the other in area 1. OSPF adjacency requires matching area numbers, hello/dead timers, and network type. IP reachability alone is not enough.
What to study next
Got this wrong? Here's your next step.
Identify which exam domain this question belongs to, review the core concept, then practise similar questions from the same domain.
- →
SD-Access Architecture — study guide chapter
Learn the concepts, then practise the questions
- →
SD-Access Architecture practice questions
Targeted practice on this topic area only
- →
All 350-401 questions
2,015 questions across all exam domains
- →
ENCOR 350-401 study guide
Full concept coverage aligned to exam objectives
- →
350-401 practice test guide
How to use practice tests most effectively before exam day
Related practice questions
Related 350-401 practice-question pages
Use these pages to review the topic behind this question. This is how one missed question becomes focused revision.
Architecture practice questions
Practise 350-401 questions linked to Architecture.
Enterprise Network Design practice questions
Practise 350-401 questions linked to Enterprise Network Design.
SD-Access Architecture practice questions
Practise 350-401 questions linked to SD-Access Architecture.
SD-WAN Architecture practice questions
Practise 350-401 questions linked to SD-WAN Architecture.
QoS Architecture practice questions
Practise 350-401 questions linked to QoS Architecture.
Virtualization practice questions
Practise 350-401 questions linked to Virtualization.
Network Function Virtualization practice questions
Practise 350-401 questions linked to Network Function Virtualization.
Virtual Machines and Hypervisors practice questions
Practise 350-401 questions linked to Virtual Machines and Hypervisors.
VRF and Path Isolation practice questions
Practise 350-401 questions linked to VRF and Path Isolation.
Infrastructure practice questions
Practise 350-401 questions linked to Infrastructure.
OSPF practice questions
Practise 350-401 questions linked to OSPF.
BGP practice questions
Practise 350-401 questions linked to BGP.
Practice this exam
Start a free 350-401 practice session
Short sessions build daily habit. Longer sessions build exam-day stamina. Try a timed session to simulate real conditions.
FAQ
Questions learners often ask
What does this 350-401 question test?
SD-Access Architecture — This question tests SD-Access Architecture — Read the scenario before looking for a memorised answer..
What is the correct answer to this question?
The correct answer is: EIGRP will send and receive updates only on GigabitEthernet0/0. — The `passive-interface default` command sets all interfaces to passive by default, preventing EIGRP from sending or receiving hello packets (and thus updates) on them. The `no passive-interface GigabitEthernet0/0` command then overrides this default for that specific interface, allowing EIGRP to send and receive updates only on GigabitEthernet0/0. The network statement 10.0.0.0 0.255.255.255 enables EIGRP on any interface matching the 10.0.0.0/8 range, but the passive-interface logic restricts actual adjacency formation.
What should I do if I get this 350-401 question wrong?
Identify which exam domain this question belongs to, review the core concept, then practise similar questions from the same domain.
What is the key concept behind this question?
Read the scenario before looking for a memorised answer.
About these practice questions
Courseiva creates original exam-style practice questions with explanations and wrong-answer analysis. It does not publish real exam questions, exam dumps, or protected exam content. Learn why practice questions differ from exam dumps →
Keep practising
More 350-401 practice questions
- Drag and drop the steps to configure an extended access control list (ACL) on a Cisco router in the correct order.
- Drag and drop the steps to configure a site-to-site IPsec VPN on a Cisco router in the correct order.
- Drag and drop the steps to configure VLAN Trunking Protocol (VTP) on a Cisco switch in the correct order.
- Drag and drop the steps to configure a static route on a Cisco IOS router into the correct order.
- Drag and drop the steps to configure port security on a Cisco switch in the correct order.
- Drag and drop the steps for the Spanning Tree Protocol (STP) convergence process in the correct order.
Last reviewed: Jun 24, 2026
This 350-401 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-401 exam.
Question Discussion
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
Sign in to join the discussion.