Courseiva
Architecture →easyMultiple Choice

350-401 Architecture Practice Question

A network administrator is configuring a Cisco IOS router to participate in a First Hop Redundancy Protocol group. The requirement is that the group must use a virtual MAC address of 0000.0c07.acXX and support only IPv4. Which protocol should the administrator configure?

⚠ Common exam trap

The trap here is assuming that any FHRP will work because they all provide gateway redundancy, when the specific virtual MAC address format and IPv4-only limitation uniquely identify HSRP version 1.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

Hot Standby Router Protocol (HSRP) version 1

HSRP version 1 is the only protocol listed that uses the virtual MAC address 0000.0c07.acXX and supports IPv4 only. VRRPv2 uses a different MAC prefix, GLBP uses 0007.b400.XXYY, and HSRPv2 uses 0000.0c9f.fXXX. The administrator should configure HSRPv1 to meet the exact virtual MAC and IPv4-only requirements.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • ✓

    Hot Standby Router Protocol (HSRP) version 1

    Why this is correct

    HSRP version 1 uses the virtual MAC address 0000.0c07.acXX, where XX is the group number in hexadecimal, and it supports only IPv4. Configuring HSRPv1 with the standby command and a group number satisfies both requirements, making it the correct choice for this scenario.

  • ✗

    HSRP version 2

    Why it's wrong here

    HSRP version 2 uses the virtual MAC address 0000.0c9f.fXXX, not 0000.0c07.acXX. It also adds IPv6 support and a larger group range. Since the requirement specifies the HSRPv1 MAC format and IPv4-only support, HSRPv2 does not meet the criteria and is therefore incorrect.

  • ✗

    Virtual Router Redundancy Protocol (VRRP) version 2

    Why it's wrong here

    VRRP version 2 uses the virtual MAC address 0000.5e00.01XX, not 0000.0c07.acXX, and it supports IPv4 and IPv6. Although VRRP provides first hop redundancy, its MAC address format does not match the requirement, so it is incorrect for this scenario.

  • ✗

    Gateway Load Balancing Protocol (GLBP)

    Why it's wrong here

    GLBP uses the virtual MAC address 0007.b400.XXYY, where XX is the group number and YY is the forwarder number. It also supports load balancing across multiple gateways, which goes beyond the stated requirement. Because the MAC address does not match 0000.0c07.acXX, GLBP is not the correct protocol here.

Quick reference

Access Control Model Comparison

ModelAcronymWho Controls Access?Best For
Discretionary Access ControlDACResource ownerSmall teams, file shares
Mandatory Access ControlMACSystem / security labelsClassified govt / military
Role-Based Access ControlRBACAdministrator (via roles)Enterprise environments
Attribute-Based Access ControlABACPolicy engine (user + resource attributes)Fine-grained, dynamic policies
Rule-Based Access ControlRuBACSystem rules / ACLsFirewall rules, network ACLs

Go deeper

Related to this question

About these practice questions

One of 1,923 original 350-401 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written and reviewed by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

Last reviewed September 2026 · checked against the official Cisco exam blueprint

This 350-401 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-401 exam.