mediumMultiple ChoiceObjective-mapped
300-410 Practice Question: Runs the following command on Router R1: R1# show…
A network engineer runs the following command on Router R1:
R1# show ipv6 source-guard policy Interface Policy Role State
Gi0/0/0 SRC_GUARD host ACTIVE Gi0/0/1 SRC_GUARD host ACTIVE Gi0/0/2 (default) host ACTIVE
Based on this output, which statement is correct?
⚠ Common exam trap
Watch out — candidates often assume 'default' policy means disabled or no protection, but in IPv6 source guard, the default policy still enforces source guard filtering with the host role.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Source guard is enabled on all interfaces, preventing IPv6 address spoofing.
The output shows that Gi0/0/2 uses the (default) policy, which still applies IPv6 source guard with the role 'host' and state 'ACTIVE'. This means source guard is enabled on all three interfaces, preventing IPv6 address spoofing by filtering traffic based on the source address learned via Neighbor Discovery (ND) or DHCPv6.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Only Gi0/0/0 and Gi0/0/1 have source guard enabled.
Why it's wrong here
Gi0/0/2 also has source guard via the default policy.
- ✓
Source guard is enabled on all interfaces, preventing IPv6 address spoofing.
Why this is correct
All interfaces show active state with source guard policy.
- ✗
Source guard is disabled on Gi0/0/2 because it uses the default policy.
Why it's wrong here
Default policy still enables source guard with role 'host'.
- ✗
Role 'host' means the interface is a router port.
Why it's wrong here
Role 'host' indicates it is a host-facing port.
Go deeper
Related to this question
About these practice questions
One of 1,966 original 300-410 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 300-410 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 300-410 exam.