mediumMultiple ChoiceObjective-mapped
300-410 Practice Question: Examine the following partial IPv6 DHCP guard…
Examine the following partial IPv6 DHCP guard configuration:
ipv6 dhcp guard policy DHCP_GUARD device-role server match server access-list SERVER_ACL
interface GigabitEthernet0/2
ipv6 dhcp guard policy DHCP_GUARD
Which statement is true about this configuration?
⚠ Common exam trap
Cisco often tests the misconception that setting device-role server blocks all server messages, but the match server ACL allows specific trusted servers, so the interface permits only those matching the ACL.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The interface will allow DHCP server messages only from sources matching SERVER_ACL.
The configuration applies the DHCP_GUARD policy to GigabitEthernet0/2 with the device-role set to server and a match server access-list SERVER_ACL. This means the interface is configured to trust DHCP server messages, but only those that match the source addresses permitted by SERVER_ACL. Any DHCP server messages from sources not matching the ACL will be dropped, while client messages are unaffected because the policy only filters server-side traffic.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
The interface will allow DHCP server messages only from sources matching SERVER_ACL.
Why this is correct
The 'match server' clause restricts which servers are trusted, and the policy is applied to the interface.
- ✗
The interface will block all DHCP server messages.
Why it's wrong here
The policy allows server messages that match the ACL, not block all.
- ✗
The interface will allow all DHCP client messages.
Why it's wrong here
The policy focuses on server messages; client messages are not explicitly filtered.
- ✗
The interface will drop all DHCP messages.
Why it's wrong here
Only server messages not matching the ACL are dropped.
Visual reference
Go deeper
Related to this question
About these practice questions
This 300-410 question is part of Courseiva's 1,966-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 300-410 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 300-410 exam.