mediumMultiple ChoiceObjective-mapped
300-410 Practice Question: Runs the following command to verify IPv6 First…
A network engineer runs the following command to verify IPv6 First Hop Security operation:
R1# show ipv6 nd raguard policy TRUSTED
Policy: TRUSTED Status: Active Device role: host Trusted ports: Fa0/1 Untrusted ports: none RA Guard: enabled RA Guard policy: allow ND inspection: enabled ND inspection policy: INSPECT
What does this output indicate?
⚠ Common exam trap
The trap here is that candidates may misinterpret 'RA Guard: enabled' as blocking RAs, but the output explicitly shows 'RA Guard policy: allow', meaning RAs are permitted on the trusted port.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The policy TRUSTED allows RAs on Fa0/1 and performs ND inspection using policy INSPECT.
The output shows that policy TRUSTED is active, with Fa0/1 listed as a trusted port. Since RA Guard is enabled with an 'allow' policy, Router Advertisements (RAs) received on Fa0/1 are permitted. Additionally, ND inspection is enabled using policy INSPECT, meaning Neighbor Discovery messages are inspected on that port. This matches option A.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
The policy TRUSTED allows RAs on Fa0/1 and performs ND inspection using policy INSPECT.
Why this is correct
The output shows RA Guard is enabled with allow action, and ND inspection is enabled with policy INSPECT on the trusted port.
- ✗
The policy TRUSTED blocks all RAs on Fa0/1 and disables ND inspection.
Why it's wrong here
RA Guard is set to allow, not block, and ND inspection is enabled.
- ✗
The policy TRUSTED only applies to untrusted ports and has no effect on Fa0/1.
Why it's wrong here
Fa0/1 is listed as a trusted port, so the policy applies to it.
- ✗
The policy TRUSTED is inactive and not applied to any interface.
Why it's wrong here
Status is Active, and Fa0/1 is a trusted port.
Go deeper
Related to this question
About these practice questions
Courseiva writes every 300-410 question from scratch — 1,966 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 300-410 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 300-410 exam.