hardMultiple SelectObjective-mapped
300-410 Practice Question: Which TWO statements about IPv6 First Hop…
Which TWO statements about IPv6 First Hop Security (FHS) Device Tracking are true? (Choose TWO.)
⚠ Common exam trap
Cisco often tests the misconception that Device Tracking only works with IPv6, when in fact it supports both IPv6 and IPv4 hosts, and the 'ipv6 device-track' command is simply the interface-level enablement for IPv6 tracking.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Device Tracking uses Neighbor Discovery (ND) probes to determine if a host is still reachable.
Device Tracking uses Neighbor Discovery (ND) probes (e.g., Neighbor Solicitations) to actively verify whether a host is still reachable on the link. This mechanism allows the switch to detect host movement or disconnection and update its binding table accordingly, ensuring that security features like RA Guard and DHCP Guard apply to the correct host state.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Device Tracking uses Neighbor Discovery (ND) probes to determine if a host is still reachable.
Why this is correct
Correct. Device Tracking sends ND probes to verify host reachability and updates the binding table accordingly.
- ✗
Device Tracking relies on DHCPv6 lease expiration to remove stale bindings.
Why it's wrong here
Incorrect. Device Tracking uses active probes, not DHCPv6 lease times, to determine host presence.
- ✗
Device Tracking creates binding entries for hosts that are discovered via ND.
Why it's wrong here
Incorrect. Device Tracking does not create bindings; it only tracks the state of existing bindings.
- ✓
Device Tracking can be enabled on a per-interface basis using the 'ipv6 device-track' command.
Why this is correct
Correct. The 'ipv6 device-track' command enables Device Tracking on a specific interface.
- ✗
Device Tracking only supports IPv6 hosts.
Why it's wrong here
Incorrect. Device Tracking supports both IPv4 and IPv6 hosts, using ARP and ND probes respectively.
Visual reference
Go deeper
Related to this question
About these practice questions
Courseiva writes every 300-410 question from scratch — 1,966 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 300-410 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 300-410 exam.