hardMultiple Choice
350-401 Practice Question: Runs the following command on Router R3: R3# show…
A network engineer runs the following command on Router R3:
R3# show dmvpn
Legend: Attrb -> S: Static, D: Dynamic, I: Incomplete N: NATed, L: Local, X: No Socket
# Ent -> Number of NHRP entries with same NBMA peer
NHS Status: E => Expecting Replies, R => Responding, W => Waiting UpDn Time -> Up or Down Time for a Tunnel ==========================================================================
Interface: Tunnel0, IPv4 NHRP Details
Type:Hub, NHRP Peers:2,
# Ent Peer NBMA Addr Peer Tunnel Add State UpDn Tm Attrb
----- --------------- --------------- ----- -------- ----- 1 192.168.1.1 10.0.0.1 UP 00:12:34 D 1 192.168.1.2 10.0.0.2 UP 00:10:20 D
Based on this output, what can be concluded?
⚠ Common exam trap
Cisco often tests the distinction between Hub and Spoke roles in DMVPN output; candidates mistakenly assume any router with multiple peers must be a spoke, but the 'Type:Hub' field and dynamic attribute entries clearly identify the hub role.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
There are two active spoke routers connected to this hub.
The output shows the router is a Hub (Type:Hub) with two NHRP peers (NHRP Peers:2), both in the UP state with dynamic (D) attribute entries. This confirms that two spoke routers have successfully registered with this hub via NHRP, making option B correct.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
This router is a spoke in the DMVPN network.
Why it's wrong here
The output explicitly displays `Type:Hub`, which is the NHRP role assigned to this router's tunnel interface. In a DMVPN deployment, the hub is the NHRP server that accepts registrations from spokes and answers resolution requests; a spoke would be labeled `Type:Spoke` and would send registration requests rather than maintain the NHRP database. Therefore, labeling this router as a spoke misinterprets the role field shown in the NHRP output.
- ✓
There are two active spoke routers connected to this hub.
Why this is correct
The NHRP peer table lists two distinct entries, each with a state of `UP` and a flag showing `D` for dynamically registered peers. These entries represent two spoke routers that have successfully completed NHRP registration with this hub, and they remain reachable through the mGRE tunnel. The presence of two `UP` dynamic peers directly confirms that exactly two active spoke routers are connected to this hub.
- ✗
The tunnel interface is down because no peers are listed.
Why it's wrong here
The output actually lists two peers, both in the `UP` state, so the claim that no peers are listed is false. Furthermore, an mGRE tunnel interface does not go down merely because the NHRP peer table is empty; its line state depends on the physical interface and tunnel configuration. With both peers showing `State: UP`, the tunnel is clearly operational and carrying NHRP registrations.
- ✗
The router is using static NHRP mappings for all peers.
Why it's wrong here
The flag field for every peer in the NHRP table shows a `D`, which indicates a dynamic mapping learned through NHRP Registration Request, not a static mapping. Static NHRP mappings would appear with an `S` flag and are typically configured with the `ip nhrp map` command or a static `tunnel destination` on a spoke-to-hub configuration. Since both entries display `D` and no `S` flag is present, the router is clearly using dynamic NHRP mappings for all peers.
About these practice questions
One of 1,923 original 350-401 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 350-401 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-401 exam.