mediumMultiple ChoiceObjective-mapped
300-410 Practice Question: In IPv6 First Hop Security, what is the purpose…
In IPv6 First Hop Security, what is the purpose of the 'device-role' command in a DHCP guard policy?
⚠ Common exam trap
Cisco often tests the distinction between DHCP guard and other First Hop Security features like RA guard or ND inspection, so candidates may confuse the 'device-role' command with trust settings for ND or RA messages.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
It specifies whether the interface is a server, client, or relay for DHCP filtering.
The 'device-role' command in a DHCP guard policy specifies the role of the interface as either a DHCP server, client, or relay. This allows the switch to filter DHCP messages based on the expected role, blocking unauthorized DHCP server messages on interfaces that should only have clients or relays. It is a key component of IPv6 First Hop Security to prevent rogue DHCPv6 servers.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
It specifies whether the interface is a server, client, or relay for DHCP filtering.
Why this is correct
The role dictates the expected DHCP message types on that interface.
- ✗
It sets the trust level for ND inspection.
Why it's wrong here
That is for ND inspection, not DHCP guard.
- ✗
It defines the VLAN membership for the interface.
Why it's wrong here
VLAN membership is configured separately.
- ✗
It enables IPv6 routing on the interface.
Why it's wrong here
IPv6 routing is enabled with 'ipv6 unicast-routing'.
Visual reference
Go deeper
Related to this question
About these practice questions
This 300-410 question is part of Courseiva's 1,966-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 300-410 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 300-410 exam.