hardMultiple SelectObjective-mapped
350-401 Practice Question: Which three statements about DMVPN phase 2 are…
Which three statements about DMVPN phase 2 are true? (Choose three.)
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Spokes can dynamically establish direct tunnels with each other after learning the destination spoke's public address via NHRP.
DMVPN phase 2 allows spoke-to-spoke tunnels after initial hub registration, uses NHRP to resolve spoke addresses, and supports spoke-to-spoke direct communication without hub forwarding of data traffic. The hub still participates in routing updates. Phase 2 does not support spoke-to-spoke without NHRP resolution, and the spoke does not need a static crypto map for each peer.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Spokes can dynamically establish direct tunnels with each other after learning the destination spoke's public address via NHRP.
Why this is correct
Correct because in phase 2, NHRP allows spokes to resolve the public IP of other spokes and build direct mGRE tunnels.
- ✗
The hub router must be configured with a static crypto map for each spoke.
Why it's wrong here
Incorrect because DMVPN uses dynamic crypto maps (or IPsec profiles) on the hub to accept connections from any spoke.
- ✗
Data traffic between spokes is forwarded through the hub by default.
Why it's wrong here
Incorrect because in phase 2, once the direct spoke-to-spoke tunnel is established, traffic bypasses the hub.
- ✓
Routing protocols such as EIGRP or OSPF can be run over the DMVPN tunnel interfaces.
Why this is correct
Correct because DMVPN supports dynamic routing protocols over the mGRE tunnel interfaces for route exchange.
- ✓
NHRP redirect and shortcut features are used to enable spoke-to-spoke communication.
Why this is correct
Correct because NHRP redirect (on hub) and shortcut (on spoke) are key mechanisms in phase 2 to trigger direct tunnel setup.
Visual reference
Go deeper
Related to this question
About these practice questions
This 350-401 question is part of Courseiva's 1,175-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 350-401 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-401 exam.