nerdexam
Cisco

350-401 · Question #883

A switch is attached to router R1 on its gig 0/0 interface. Fort security reasons, you want to prevent R1 from sending OSPF hellos to the switch. Which command should be enabled to accomplish this?

The correct answer is D. R1(config-router)#passive-interface Gig 0/0. To prevent a router from sending OSPF hello packets out a specific interface while still advertising its connected network, the passive-interface command should be configured under the OSPF router process.

Submitted by anna_se· Mar 6, 2026

Question

A switch is attached to router R1 on its gig 0/0 interface. Fort security reasons, you want to prevent R1 from sending OSPF hellos to the switch. Which command should be enabled to accomplish this?

Options

  • AR1(config-router)#ip ospf hello disable
  • BR1(config-router)#ip ospf hello-interval 0
  • CR1(config)#passive-interface Gig 0/0
  • DR1(config-router)#passive-interface Gig 0/0

How the community answered

(23 responses)
  • A
    9% (2)
  • B
    4% (1)
  • C
    13% (3)
  • D
    74% (17)

Why each option

To prevent a router from sending OSPF hello packets out a specific interface while still advertising its connected network, the `passive-interface` command should be configured under the OSPF router process.

AR1(config-router)#ip ospf hello disable

`ip ospf hello disable` is not a valid or recognized Cisco IOS OSPF command to disable hello packets.

BR1(config-router)#ip ospf hello-interval 0

Setting `ip ospf hello-interval 0` is not a valid or functional command to disable hello packets; an interval of 0 is typically rejected or leads to unexpected behavior.

CR1(config)#passive-interface Gig 0/0

While `passive-interface Gig 0/0` is the correct command, it must be configured within the OSPF router configuration mode (`config-router`), not global configuration mode (`config`).

DR1(config-router)#passive-interface Gig 0/0Correct

The command `passive-interface Gig 0/0` entered within OSPF router configuration mode (`config-router`) prevents OSPF hello packets from being sent out on the specified interface (Gig 0/0). This stops OSPF adjacency formation on that segment but still allows the directly connected network to be advertised into the OSPF domain, which is suitable for connecting to a switch where OSPF peering is not needed.

Concept tested: OSPF passive interface configuration

Source: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_ospf/command/iro-cr-book/ospf-i2.html

Topics

#OSPF#Passive Interface#Cisco Router Config#Routing Security

Community Discussion

No community discussion yet for this question.

Full 350-401 Practice