mediumMultiple Choice
300-410 Practice Question: Runs the following command on Router R1: R1# show…
A network engineer runs the following command on Router R1:
R1# show ip nhrp 10.0.0.2/32 via 10.0.0.2, Tunnel0 created 00:15:30, expire 01:44:30
Type: dynamic, Flags: used NBMA address: 192.168.1.2
10.0.0.3/32 via 10.0.0.3, Tunnel0 created 00:10:20, expire 01:49:40
Type: dynamic, Flags: used NBMA address: 192.168.1.3
Based on this output, which statement is correct?
⚠ Common exam trap
The trap is misreading the Type field or assuming entries with expire timers are expired; candidates must recognize that future expire times mean active entries.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Both NHRP entries are active and dynamically learned.
The output shows two NHRP entries with Type: dynamic and Flags: used, indicating they were dynamically learned via NHRP registration/resolution and are currently active (not expired). The expire timers (01:44:30 and 01:49:40) confirm they are valid.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Both NHRP entries are static.
Why it's wrong here
The output labels both mappings Type: dynamic, so static is factually contradicted by the flags shown. Static entries are configured manually with the ip nhrp map command and never expire; they would suit a fixed spoke-to-hub NBMA mapping where no registration or resolution is required.
- ✓
Both NHRP entries are active and dynamically learned.
Why this is correct
Both entries show Type: dynamic and Flags: used, meaning NHRP learned them from registration or resolution replies and they are currently valid. The remaining expiry timers confirm the mappings are active, so both next-hop entries are dynamically learned and in use.
- ✗
The NHRP entries have expired.
Why it's wrong here
Each entry shows remaining expiry times of 01:44:30 and 01:49:40, so the mappings are still valid and in use. It is tempting because the created timestamps suggest age, and would be correct only if the entries had reached zero and been removed.
- ✗
The NBMA addresses are IPv6 addresses.
Why it's wrong here
The NBMA addresses 192.168.1.2 and 192.168.1.3 are IPv4 dotted-quad values, not IPv6. It is tempting because NHRP NBMA addresses can be IPv6 in some deployments, and would be correct only if the output showed colon-separated hexadecimal addresses.
Go deeper
Related to this question
Learn chapter
Introduction to ENARSI Exam and Network Fundamentals
Key term
DMVPN Phase 2
DMVPN Phase 2 is an advanced Cisco routing technology that allows spoke routers to communicate directly with one another without sending traffic through a central hub, using dynamic routing protocols and multipoint GRE tunnels.
About these practice questions
Courseiva writes every 300-410 question from scratch — 1,401 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Cisco exam blueprint
This 300-410 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 300-410 exam.