hardMultiple Choice
300-410 Practice Question: Runs the following command to troubleshoot a…
A network engineer runs the following command to troubleshoot a VRF-Lite DMVPN issue:
R1# show ip nhrp vrf CUSTOMER_G detail
Output:
10.6.6.1/32 via 10.6.6.1, Tunnel0 created 00:01:00, expire 01:59:00
Type: dynamic, Flags: used NBMA address: 192.168.1.1 (no-socket) Registration handle: 0x00000001 Cache entries: 1
What does this output indicate?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The NHRP mapping for 10.6.6.1 is dynamic, with NBMA address 192.168.1.1, and is actively used.
The 'show ip nhrp vrf detail' command displays NHRP cache entries for a specific VRF. The output shows a dynamic NHRP mapping for destination 10.6.6.1/32, with NBMA address 192.168.1.1, learned via Tunnel0. The entry was created 1 minute ago and will expire in 1 hour 59 minutes. The 'used' flag indicates the mapping is actively being used.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The NHRP mapping is static and was manually configured.
Why it's wrong here
The Type field explicitly reads dynamic, contradicting a manually configured static entry. Static mappings are tempting because they also appear in NHRP caches, but they would be the correct answer only if the output showed Type: static, typically created by an ip nhrp map command.
- ✓
The NHRP mapping for 10.6.6.1 is dynamic, with NBMA address 192.168.1.1, and is actively used.
Why this is correct
The Type field shows dynamic, meaning the mapping was learned via NHRP registration rather than statically configured, and the Flags field shows used, confirming active traffic. The NBMA address 192.168.1.1 maps to the tunnel IP 10.6.6.1.
- ✗
The NHRP mapping has expired and needs to be refreshed.
Why it's wrong here
The output shows expire 01:59:00, meaning the entry remains valid for nearly two hours, so nothing has expired. The expiry field is tempting because it tracks remaining lifetime, and refreshing would be the right action only once that timer reaches zero and the mapping is purged.
- ✗
The NHRP mapping is for a multicast group address.
Why it's wrong here
The mapping is a unicast /32 host entry with an NBMA address of 192.168.1.1, not a multicast group. Multicast mappings are tempting because DMVPN uses NHRP for group registration, but they would be correct only if the output showed a multicast NBMA address or group flag.
Go deeper
Related to this question
Learn chapter
Introduction to ENARSI Exam and Network Fundamentals
Key term
MPLS Layer 3 VPN
A technology that uses Multiprotocol Label Switching to create secure, scalable virtual private networks that connect multiple sites at the network layer, where the service provider manages routing between customer sites.
Key term
DMVPN Phase 2
DMVPN Phase 2 is an advanced Cisco routing technology that allows spoke routers to communicate directly with one another without sending traffic through a central hub, using dynamic routing protocols and multipoint GRE tunnels.
About these practice questions
Courseiva writes every 300-410 question from scratch — 1,401 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 300-410 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 300-410 exam.