300-410 Infrastructure Services Practice Question
A network engineer is configuring a Cisco IOS XE router to support First Hop Redundancy Protocol (FHRP) for a group of hosts on VLAN 10. The design requires that the virtual IP address and virtual MAC address remain the same even if the active router changes. The engineer decides to use Virtual Router Redundancy Protocol (VRRP) version 2. Which statement about VRRPv2 is true?
⚠ Common exam trap
The trap here is mixing up VRRPv2 details with HSRP, such as the multicast address and MAC address format.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
VRRPv2 uses a virtual MAC address of 0000.0c07.acXX, where XX is the group ID in hexadecimal.
VRRPv2 uses the virtual MAC address 0000.0c07.acXX, where XX is the VRRP group ID in hexadecimal. This ensures a consistent virtual MAC for hosts, regardless of which physical router is master. The other statements are incorrect: VRRPv2 does not support IPv6 (that requires VRRPv3), it uses multicast 224.0.0.18 (not 224.0.0.2), and preemption can be disabled on any router, not just the master.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
VRRPv2 allows preemption to be disabled only on the master router.
Why it's wrong here
In VRRPv2, preemption is enabled by default, and it can be disabled on any router in the group, not just the master. The 'no preempt' command can be configured on a router to prevent it from taking over as master even if it has a higher priority. This is often used to maintain stability. The statement that it can only be disabled on the master is false. Preemption control is available on all VRRP routers, allowing flexible design.
- ✗
VRRPv2 supports IPv6 natively without any additional configuration.
Why it's wrong here
VRRPv2 is designed for IPv4 only. IPv6 support was introduced in VRRPv3. To use VRRP with IPv6, you must configure VRRPv3. Therefore, VRRPv2 cannot natively support IPv6. The scenario does not mention IPv6, but this statement is false. The engineer must use VRRPv3 for IPv6 redundancy. This is a common point of confusion, as VRRPv2 is limited to IPv4 addresses and does not have the address family capabilities of VRRPv3.
- ✗
VRRPv2 uses multicast address 224.0.0.2 for hello packets.
Why it's wrong here
VRRPv2 uses multicast address 224.0.0.18 for VRRP advertisements. The address 224.0.0.2 is used by HSRPv1. Using the wrong multicast address would prevent VRRP routers from communicating. The engineer must ensure that the correct multicast address is allowed if there are any multicast filters. This statement is incorrect and would lead to misconfiguration if relied upon.
- ✓
VRRPv2 uses a virtual MAC address of 0000.0c07.acXX, where XX is the group ID in hexadecimal.
Why this is correct
VRRPv2 uses a virtual MAC address derived from the VRRP group ID. The format is 0000.0c07.acXX, where XX is the group ID in hexadecimal. This ensures that the virtual MAC remains consistent regardless of which router is the master. The virtual IP and MAC are maintained during failover, providing seamless redundancy. This is a key characteristic of VRRP, distinguishing it from HSRP, which uses a different MAC format.
Visual reference
Quick reference
Access Control Model Comparison
| Model | Acronym | Who Controls Access? | Best For |
|---|---|---|---|
| Discretionary Access Control | DAC | Resource owner | Small teams, file shares |
| Mandatory Access Control | MAC | System / security labels | Classified govt / military |
| Role-Based Access Control | RBAC | Administrator (via roles) | Enterprise environments |
| Attribute-Based Access Control | ABAC | Policy engine (user + resource attributes) | Fine-grained, dynamic policies |
| Rule-Based Access Control | RuBAC | System rules / ACLs | Firewall rules, network ACLs |
Go deeper
Related to this question
About these practice questions
Courseiva writes every 300-410 question from scratch — 1,401 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Cisco exam blueprint
This 300-410 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 300-410 exam.