mediumMultiple Select
300-410 Practice Question: Which TWO commands would a network engineer use…
Which TWO commands would a network engineer use to verify the NHRP registration status of a spoke router in a DMVPN Phase 2 network? (Choose TWO.)
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
show dmvpn
The 'show dmvpn' command displays the current DMVPN tunnel status, including the NHRP registration state of each peer. The 'show ip nhrp' command shows the NHRP cache entries, which include the registration status and mapping information. The other commands either do not show NHRP registration details or are for different purposes.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
show dmvpn
Why this is correct
The show dmvpn command lists all DMVPN tunnels with peer state, uptime and NBMA addresses, showing whether each spoke has reached the UP state after NHRP registration. It directly verifies registration status in the Phase 2 network.
- ✓
show ip nhrp
Why this is correct
The show ip nhrp command displays the local NHRP cache, listing registered next-hop server and peer mappings with their NBMA and tunnel addresses. This directly confirms whether the spoke has successfully registered with its hub in the DMVPN Phase 2 network.
- ✗
show crypto isakmp sa
Why it's wrong here
show crypto isakmp sa displays IPsec/IKE security associations, not NHRP registration; the tunnel can be up while NHRP mapping is missing. It is tempting because DMVPN uses IPsec, but the correct commands are show dmvpn and show ip nhrp, which directly report NHRP registration and peer state.
- ✗
show ip route
Why it's wrong here
show ip route displays the routing table, not NHRP registration state; it cannot confirm whether a spoke has registered with the hub. It is tempting because routes to other spokes appear after NHRP resolution, but the correct commands are show dmvpn and show ip nhrp, which expose registration and peer state directly.
- ✗
show ip eigrp neighbors
Why it's wrong here
show ip eigrp neighbors shows EIGRP adjacency, not NHRP registration; a spoke can have EIGRP neighbours while NHRP registration is absent. It is tempting because DMVPN relies on EIGRP over the tunnel, but the correct commands are show dmvpn and show ip nhrp, which report NHRP peer and registration status.
Go deeper
Related to this question
Learn chapter
Device Management and Network Monitoring (SNMP, Syslog, NetFlow)
Key term
DMVPN Phase 2
DMVPN Phase 2 is an advanced Cisco routing technology that allows spoke routers to communicate directly with one another without sending traffic through a central hub, using dynamic routing protocols and multipoint GRE tunnels.
About these practice questions
Courseiva writes every 300-410 question from scratch — 1,401 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 300-410 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 300-410 exam.