mediumMultiple Choice
350-401 Practice Question: Runs the following command on Router R8: R8# show…
A network engineer runs the following command on Router R8:
R8# show ip nhrp 10.0.0.1/32 via 10.0.0.1
Tunnel0 created 00:10:00, expire 01:50:00 Type: dynamic, Flags: unique registered NBMA address: 192.168.1.1
10.0.0.2/32 via 10.0.0.2
Tunnel0 created 00:05:00, expire 01:55:00 Type: dynamic, Flags: unique registered NBMA address: 192.168.1.2
Based on this output, what can be concluded?
⚠ Common exam trap
Cisco often tests the distinction between hub and spoke roles by the number and type of NHRP entries—candidates mistakenly think a router with multiple entries is a spoke, but in reality, a hub has many dynamic entries (spokes registered to it), while a spoke typically has one static or dynamic entry for the hub.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The router is a DMVPN hub with two registered spokes.
The output shows two NHRP entries with 'Type: dynamic' and 'Flags: unique registered', which indicates that these are spokes that have dynamically registered their NBMA addresses with this router. The presence of multiple registered entries and the absence of static NHRP mappings confirm this router is acting as a DMVPN hub, as hubs maintain a registry of all connected spokes.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The router has static NHRP mappings configured.
Why it's wrong here
The 'Type' column in the NHRP output shows 'dynamic' entries, which are learned through NHRP Registration Request packets sent by remote devices. Static NHRP mappings are manually entered with the 'ip nhrp map' command and would appear with a 'static' type, not 'dynamic'. Additionally, the presence of the 'unique' flag is a characteristic of dynamically registered peers, confirming these are not static mappings.
- ✓
The router is a DMVPN hub with two registered spokes.
Why this is correct
This router is operating as a DMVPN hub because it has multiple dynamic NHRP entries, each flagged as 'unique' and 'registered'. In DMVPN, spokes initiate NHRP registration to the hub, which then stores their physical (NBMA) addresses in its NHRP cache. Two distinct entries with these flags indicate that two separate spokes have successfully registered, which is the expected behavior for a hub in a hub-and-spoke topology.
- ✗
The NHRP entries are about to expire because the expire time is less than 2 hours.
Why it's wrong here
The expire time shown (e.g., 1 hour 50 minutes) is simply the remaining time on the NHRP holding timer, which is typically set to 7200 seconds (2 hours). Since the countdown starts from the last refresh, values below 2 hours are expected during normal operation, and NHRP entries are automatically refreshed before reaching zero. The presence of a valid registration and the 'registered' flag confirm that the entries are healthy, not on the verge of expiry.
- ✗
The router is a spoke because it has only two entries.
Why it's wrong here
A spoke router typically maintains only a single NHRP entry for its hub (or a few in dual-hub designs), but it does not receive multiple 'registered' entries because spokes do not accept registrations from other spokes. In contrast, a hub aggregates registration requests from all connected spokes, resulting in multiple dynamic entries with the 'registered' flag. The mere count of two entries is insufficient to infer a spoke role; the combination of multiple 'registered' and 'unique' entries is the defining characteristic of a DMVPN hub.
About these practice questions
One of 1,923 original 350-401 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 350-401 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-401 exam.