Drag and drop each DMVPN phase on the left to its matching spoke-to-spoke capability on the right.
Drag a concept onto its matching description — or click a concept then click the description.
No direct spoke-to-spoke tunnels
Direct spoke-to-spoke tunnels with static NHRP mapping
Direct spoke-to-spoke tunnels with NHRP redirect and shortcut
⚠ Common exam trap
A common trap is confusing Phase 2 and Phase 3 descriptions. Phase 2 uses static NHRP mappings (not manual tunnel creation), while Phase 3 adds redirect and shortcut. Also, 'dynamically established' applies to both Phase 2 and Phase 3, so it is not unique to Phase 3.
Answer choices
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
Phase 1: No direct spoke-to-spoke tunnels
In DMVPN, Phase 1 (P1) does not support direct spoke-to-spoke tunnels; all traffic must go through the hub. Phase 2 (P2) enables direct spoke-to-spoke tunnels using static NHRP mappings, where the mapping between spoke NBMA and tunnel IP addresses is pre-configured. Phase 3 (P3) extends Phase 2 with NHRP redirect and shortcut, optimizing traffic flow by dynamically redirecting traffic to direct paths. P4 incorrectly states that Phase 2 requires manual configuration for spoke-to-spoke tunnels; in reality, Phase 2 uses NHRP mapping (static, but not manual tunnel setup). P5 is too generic for Phase 3, as both Phase 2 and Phase 3 dynamically establish spoke-to-spoke tunnels; the key differentiator for Phase 3 is the redirect and shortcut mechanism.
Answer analysis
For each option: why learners choose it and why it is or isn't the right answer here.
Phase 1: No direct spoke-to-spoke tunnels
Why this is correct
Correct. Phase 1 is the basic hub-and-spoke topology with no direct spoke-to-spoke tunnels.
Phase 2: Direct spoke-to-spoke tunnels with static NHRP mapping
Why this is correct
Correct. Phase 2 allows direct spoke-to-spoke tunnels, configured with static NHRP mappings.
Phase 3: Direct spoke-to-spoke tunnels with NHRP redirect and shortcut
Why this is correct
Correct. Phase 3 uses NHRP redirect and shortcut to optimize spoke-to-spoke traffic.
Phase 2: Spoke-to-spoke tunnels require manual configuration
Why it's wrong here
Incorrect. In Phase 2, spoke-to-spoke tunnels are established dynamically using NHRP; they do not require manual configuration. The statement 'require manual configuration' is inaccurate.
Phase 3: Spoke-to-spoke tunnels are dynamically established
Why it's wrong here
Incorrect. While Phase 3 does dynamically establish spoke-to-spoke tunnels, so does Phase 2. The unique feature of Phase 3 is NHRP redirect and shortcut, not just dynamic establishment.
Go deeper
About these practice questions
Courseiva writes every 350-401 question from scratch — 1,175 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 350-401 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-401 exam.