Question 380
An OSPF router needs to filter certain redistributed external prefixes but an operator applies an area range command expecting it to remove type5 LSAs. During troubleshooting: External prefixes still appear in OSPF despite a changed inter-area summary range. Which underlying cause best explains the recorded behavior?
- The user-facing interface is active for OSPF neighbor discovery instead of passive.
- The ABR has no correctly scoped inter-area summary range for the advertised prefixes.
- Stub areas suppress Type 5 external LSAs; the expectation of normal external flooding was wrong.
- The area range controls inter-area summarization, not the ASBR's redistributed external LSA set.
Explanation
Correct Answer
D:The actual technical cause is: The area range controls inter-area summarization, not the ASBR's redistributed external LSA set. It specifically explains the observation: external prefixes still appear in OSPF despite a changed inter-area summary range. The correcting configuration is: apply the appropriate external redistribution route-map or prefix controls at the ASBR.
Incorrect Answers
A:That diagnosis is supported by a different symptom: Untrusted LAN hosts receive OSPF Hellos and can attempt to form adjacencies. Here the recorded observation is: external prefixes still appear in OSPF despite a changed inter-area summary range. The applicable cause is: the area range controls inter-area summarization, not the ASBR's redistributed external LSA set.
B:That diagnosis is supported by a different symptom: Area0 contains dozens of separate intra-area destinations from area10 with no consolidated summary. Here the recorded observation is: external prefixes still appear in OSPF despite a changed inter-area summary range. The applicable cause is: the area range controls inter-area summarization, not the ASBR's redistributed external LSA set.
C:That diagnosis is supported by a different symptom: External routes are absent inside the stub despite a working internal adjacency. Here the recorded observation is: external prefixes still appear in OSPF despite a changed inter-area summary range. The applicable cause is: the area range controls inter-area summarization, not the ASBR's redistributed external LSA set.
Question 381
An OSPF router needs to filter certain redistributed external prefixes but an operator applies an area range command expecting it to remove type5 LSAs. The initial change is: Apply the appropriate external redistribution route-map or prefix controls at the ASBR. Which continuing control most directly prevents a recurrence of the documented problem: External prefixes still appear in OSPF despite a changed inter-area summary range.
- Prefer passive-interface default with explicit trusted transit exceptions where supported.
- Review external redistribution policy separately from ABR inter-area ranges.
- Document area type and expected LSA categories before adding redistribution.
- Review summary boundaries to avoid blackholing addresses in unused holes.
Explanation
Correct Answer
B:The continuing protective control is: Review external redistribution policy separately from ABR inter-area ranges. This addresses the underlying failure mechanism: the area range controls inter-area summarization, not the ASBR's redistributed external LSA set. The corresponding operational check is: inspect redistributed external LSAs and confirm prohibited prefixes are not originated.
Incorrect Answers
A:That control reduces a separate risk: The user-facing interface is active for OSPF neighbor discovery instead of passive. For the described design, the recurring risk arises from: the area range controls inter-area summarization, not the ASBR's redistributed external LSA set. The specific required safeguard is: review external redistribution policy separately from ABR inter-area ranges.
C:That control reduces a separate risk: Stub areas suppress Type 5 external LSAs; the expectation of normal external flooding was wrong. For the described design, the recurring risk arises from: the area range controls inter-area summarization, not the ASBR's redistributed external LSA set. The specific required safeguard is: review external redistribution policy separately from ABR inter-area ranges.
D:That control reduces a separate risk: The ABR has no correctly scoped inter-area summary range for the advertised prefixes. For the described design, the recurring risk arises from: the area range controls inter-area summarization, not the ASBR's redistributed external LSA set. The specific required safeguard is: review external redistribution policy separately from ABR inter-area ranges.
Question 382
Two Cisco routers are connected by a /30 and require eBGP peering across autonomous systems 65010 and65020. The incident evidence is: The eBGP peer remains in Active because the remote-as is configured as the same local AS. Which targeted configuration or design change best addresses the failure?
- Configure the neighbor address with the correct remote autonomous-system number and reachable interface source.
- Correct the neighbor IP to the reachable remote interface address and validate local source selection.
- Originate only the intended present RIB prefixes using valid BGP network or controlled redistribution policy.
- Apply an explicit outbound BGP prefix list or route-map advertising only approved public networks.
Explanation
Correct Answer
A:The required correction is: Configure the neighbor address with the correct remote autonomous-system number and reachable interface source. The underlying failure mechanism is: The neighbor AS setting does not match the actual external peer ASN. Verify success by carrying out this direct test: verify TCP179 and BGP Established state plus exchanged prefixes on both routers.
Incorrect Answers
B:Correcting the neighbor IP to the reachable remote interface address and validating local source selection would not configure the neighbor address with the correct remote autonomous-system number and reachable interface source.
C:Originate only the intended present RIB prefixes using valid BGP network or controlled redistribution policy would not configure the neighbor address with the correct remote autonomous-system number and reachable interface source.
D:Applying an explicit outbound BGP prefix list or route-map advertising only approved public networks would not configure the neighbor address with the correct remote autonomous-system number and reachable interface source.
Question 383
Two Cisco routers are connected by a /30 and require eBGP peering across autonomous systems 65010 and65020. The proposed remedy is: Configure the neighbor address with the correct remote autonomous-system number and reachable interface source. Which observation would most directly confirm that remedy works as intended?
- Inspect the AS_PATH actually advertised to backup and primary providers.
- Compare BGP locally originated and advertised routes with the underlying RIB for the subnet.
- Verify TCP179 and BGP Established state plus exchanged prefixes on both routers.
- Check advertised-routes from the local neighbor and confirm private RFC1918 entries are absent.
Explanation
Correct Answer
C:The decisive acceptance observation is: Verify TCP179 and BGP Established state plus exchanged prefixes on both routers. This tests the working mechanism, while the original incident was: the eBGP peer remains in Active because the remote-as is configured as the same local AS.
Incorrect Answers
A:This test measures a different behavior: Inspect the AS_PATH actually advertised to backup and primary providers. It does not establish the target outcome. For the documented fault, the direct acceptance test is: verify TCP179 and BGP Established state plus exchanged prefixes on both routers.
B:This test measures a different behavior: Compare BGP locally originated and advertised routes with the underlying RIB for the subnet. It does not establish the target outcome. For the documented fault, the direct acceptance test is: verify TCP179 and BGP Established state plus exchanged prefixes on both routers.
D:This test measures a different behavior: Check advertised-routes from the local neighbor and confirm private RFC1918 entries are absent. It does not establish the target outcome. For the documented fault, the direct acceptance test is: verify TCP179 and BGP Established state plus exchanged prefixes on both routers.
Question 384
Two Cisco routers are connected by a /30 and require eBGP peering across autonomous systems 65010 and65020. During troubleshooting: The eBGP peer remains in Active because the remote-as is configured as the same local AS. Which underlying cause best explains the recorded behavior?
- The BGP outbound advertisement policy does not restrict routes to the approved customer prefix set.
- The neighbor AS setting does not match the actual external peer ASN.
- The required prefix was not originated into BGP despite a working peer session.
- The configured BGP neighbor destination is not the address actually used by the peer.
Explanation
Correct Answer
B:The actual technical cause is: The neighbor AS setting does not match the actual external peer ASN. It specifically explains the observation: the eBGP peer remains in Active because the remote-as is configured as the same local AS. The correcting configuration is: configure the neighbor address with the correct remote autonomous-system number and reachable interface source.
Incorrect Answers
A:That diagnosis is supported by a different symptom: Internal 10.0.0.0/8 summaries appear in a third-party eBGP peer's received table. Here the recorded observation is: the eBGP peer remains in Active because the remote-as is configured as the same local AS. The applicable cause is: the neighbor AS setting does not match the actual external peer ASN.
C:That diagnosis is supported by a different symptom: BGP Established appears healthy but the neighbor learns zero intended customer routes. Here the recorded observation is: the eBGP peer remains in Active because the remote-as is configured as the same local AS. The applicable cause is: the neighbor AS setting does not match the actual external peer ASN.
D:That diagnosis is supported by a different symptom: Neighbor stays Idle/Active while an IP ping to a different remote address succeeds. Here the recorded observation is: the eBGP peer remains in Active because the remote-as is configured as the same local AS. The applicable cause is: the neighbor AS setting does not match the actual external peer ASN.
Question 385
Two Cisco routers are connected by a /30 and require eBGP peering across autonomous systems 65010 and65020. The initial change is: Configure the neighbor address with the correct remote autonomous-system number and reachable interface source. Which continuing control most directly prevents a recurrence of the documented problem: The eBGP peer remains in Active because the remote-as is configured as the same local AS.
- Require advertised-prefix diffs and peer max-prefix limits during policy modifications.
- Document physical-link addressing and compare live neighbor entries against interface inventory.
- Audit local/remote ASNs and interface addresses before deploying peering.
- Verify advertised prefixes and exact RIB match as part of peering acceptance.
Explanation
Correct Answer
C:The continuing protective control is: Audit local/remote ASNs and interface addresses before deploying peering. This addresses the underlying failure mechanism: the neighbor AS setting does not match the actual external peer ASN. The corresponding operational check is: verify TCP179 and BGP Established state plus exchanged prefixes on both routers.
Incorrect Answers
A:That control reduces a separate risk: The BGP outbound advertisement policy does not restrict routes to the approved customer prefix set. For the described design, the recurring risk arises from: the neighbor AS setting does not match the actual external peer ASN. The specific required safeguard is: audit local/remote ASNs and interface addresses before deploying peering.
B:That control reduces a separate risk: The configured BGP neighbor destination is not the address actually used by the peer. For the described design, the recurring risk arises from: the neighbor AS setting does not match the actual external peer ASN. The specific required safeguard is: audit local/remote ASNs and interface addresses before deploying peering.
D:That control reduces a separate risk: The required prefix was not originated into BGP despite a working peer session. For the described design, the recurring risk arises from: the neighbor AS setting does not match the actual external peer ASN. The specific required safeguard is: audit local/remote ASNs and interface addresses before deploying peering.
Question 386
Two directly connected eBGP routers establish TCP but advertise no customer subnet because neither has a matching network statement or redistributed route. The incident evidence is: BGP Established appears healthy but the neighbor learns zero intended customer routes. Which targeted configuration or design change best addresses the failure?
- Compare valid BGP AS path lengths at the appropriate decision stage and select shorter path when higher priorities tie.
- Restore next-hop reachability through appropriate IGP/static routing or supported next-hop-self policy where required.
- Originate only the intended present RIB prefixes using valid BGP network or controlled redistribution policy.
- Correct the neighbor IP to the reachable remote interface address and validate local source selection.
Explanation
Correct Answer
C:The required correction is: Originate only the intended present RIB prefixes using valid BGP network or controlled redistribution policy. The underlying failure mechanism is: The required prefix was not originated into BGP despite a working peer session. Verify success by carrying out this direct test: compare BGP locally originated and advertised routes with the underlying RIB for the subnet.
Incorrect Answers
A:Comparing valid BGP AS path lengths at the appropriate decision stage and selecting shorter path when higher priorities tie would not address the need for originate only the intended present RIB prefixes using valid BGP network or controlled redistribution policy.
B:Restoring next-hop reachability through appropriate IGP/static routing or supported next-hop-self policy where required would not address the need for originate only the intended present RIB prefixes using valid BGP network or controlled redistribution policy.
D:Correcting the neighbor IP to the reachable remote interface address and validating local source selection would not address the need for originate only the intended present RIB prefixes using valid BGP network or controlled redistribution policy.
Question 387
Two directly connected eBGP routers establish TCP but advertise no customer subnet because neither has a matching network statement or redistributed route. The proposed remedy is: Originate only the intended present RIB prefixes using valid BGP network or controlled redistribution policy. Which observation would most directly confirm that remedy works as intended?
- Ping the peer interface and verify TCP179 opens and the BGP FSM reaches Established.
- Check BGP next-hop resolution and RIB installation of the previously ineligible prefix.
- Compare BGP locally originated and advertised routes with the underlying RIB for the subnet.
- Read BGP path attributes and best-path result for the two alternatives.
Explanation
Correct Answer
C:The decisive acceptance observation is: Compare BGP locally originated and advertised routes with the underlying RIB for the subnet. This tests the working mechanism, while the original incident was: bGP Established appears healthy but the neighbor learns zero intended customer routes.
Incorrect Answers
A:This test measures a different behavior: Ping the peer interface and verify TCP179 opens and the BGP FSM reaches Established. It does not establish the target outcome. For the documented fault, the direct acceptance test is: compare BGP locally originated and advertised routes with the underlying RIB for the subnet.
B:This test measures a different behavior: Check BGP next-hop resolution and RIB installation of the previously ineligible prefix. It does not establish the target outcome. For the documented fault, the direct acceptance test is: compare BGP locally originated and advertised routes with the underlying RIB for the subnet.
D:This test measures a different behavior: Read BGP path attributes and best-path result for the two alternatives. It does not establish the target outcome. For the documented fault, the direct acceptance test is: compare BGP locally originated and advertised routes with the underlying RIB for the subnet.
Question 388
Two directly connected eBGP routers establish TCP but advertise no customer subnet because neither has a matching network statement or redistributed route. During troubleshooting: BGP Established appears healthy but the neighbor learns zero intended customer routes. Which underlying cause best explains the recorded behavior?
- The configured BGP neighbor destination is not the address actually used by the peer.
- An intentional AS-path prepend on the shorter provider made it appear longer to the receiver.
- The BGP NEXT_HOP attribute has no resolvable path in the routing table.
- The required prefix was not originated into BGP despite a working peer session.
Explanation
Correct Answer
D:The actual technical cause is: The required prefix was not originated into BGP despite a working peer session. It specifically explains the observation: bGP Established appears healthy but the neighbor learns zero intended customer routes. The correcting configuration is: originate only the intended present RIB prefixes using valid BGP network or controlled redistribution policy.
Incorrect Answers
A:That diagnosis is supported by a different symptom: Neighbor stays Idle/Active while an IP ping to a different remote address succeeds. Here the recorded observation is: bGP Established appears healthy but the neighbor learns zero intended customer routes. The applicable cause is: the required prefix was not originated into BGP despite a working peer session.
B:That diagnosis is supported by a different symptom: Traffic chooses the longer provider path although all higher-priority attributes tie and the shorter path is eligible. Here the recorded observation is: bGP Established appears healthy but the neighbor learns zero intended customer routes. The applicable cause is: the required prefix was not originated into BGP despite a working peer session.
C:That diagnosis is supported by a different symptom: `show bgp` displays a received network but no usable installed route due to inaccessible next hop. Here the recorded observation is: bGP Established appears healthy but the neighbor learns zero intended customer routes. The applicable cause is: the required prefix was not originated into BGP despite a working peer session.
Question 389
Two directly connected eBGP routers establish TCP but advertise no customer subnet because neither has a matching network statement or redistributed route. The initial change is: Originate only the intended present RIB prefixes using valid BGP network or controlled redistribution policy. Which continuing control most directly prevents a recurrence of the documented problem: BGP Established appears healthy but the neighbor learns zero intended customer routes.
- Validate next-hop reachability separately from BGP session Established status.
- Verify advertised prefixes and exact RIB match as part of peering acceptance.
- Review prepend policy and baseline attribute priorities together before traffic engineering.
- Document physical-link addressing and compare live neighbor entries against interface inventory.
Explanation
Correct Answer
B:The continuing protective control is: Verify advertised prefixes and exact RIB match as part of peering acceptance. This addresses the underlying failure mechanism: the required prefix was not originated into BGP despite a working peer session. The corresponding operational check is: compare BGP locally originated and advertised routes with the underlying RIB for the subnet.
Incorrect Answers
A:That control reduces a separate risk: The BGP NEXT_HOP attribute has no resolvable path in the routing table. For the described design, the recurring risk arises from: the required prefix was not originated into BGP despite a working peer session. The specific required safeguard is: verify advertised prefixes and exact RIB match as part of peering acceptance.
C:That control reduces a separate risk: An intentional AS-path prepend on the shorter provider made it appear longer to the receiver. For the described design, the recurring risk arises from: the required prefix was not originated into BGP despite a working peer session. The specific required safeguard is: verify advertised prefixes and exact RIB match as part of peering acceptance.
D:That control reduces a separate risk: The configured BGP neighbor destination is not the address actually used by the peer. For the described design, the recurring risk arises from: the required prefix was not originated into BGP despite a working peer session. The specific required safeguard is: verify advertised prefixes and exact RIB match as part of peering acceptance.
Question 390
A router receives two eBGP alternatives for one prefix, and policy requires preferring the path with a higher LOCAL_PREF independent of shorter AS_PATH. The incident evidence is: An engineer predicts the shorter AS_PATH must win although another route has higher LOCAL_PREF. Which targeted configuration or design change best addresses the failure?
- Prepend the customer's own ASN on advertisements sent through the backup eBGP peer as appropriate.
- Apply the intended inbound/local BGP local preference policy consistently within the receiving AS.
- Compare valid BGP AS path lengths at the appropriate decision stage and select shorter path when higher priorities tie.
- Apply an appropriate Cisco-local BGP weight policy on the chosen router without expecting it to propagate to peers.
Explanation
Correct Answer
B:The required correction is: Apply the intended inbound/local BGP local preference policy consistently within the receiving AS. The underlying failure mechanism is: BGP preference order evaluates higher LOCAL_PREF before AS path length when otherwise eligible. Verify success by carrying out this direct test: inspect `show bgp` best-path attributes and verify the higher local-preference path is chosen.
Incorrect Answers
A:Prepend the customer's own ASN on advertisements sent through the backup eBGP peer as appropriate would not apply the intended inbound/local BGP local preference policy consistently within the receiving AS.
C:Comparing valid BGP AS path lengths at the appropriate decision stage and selecting shorter path when higher priorities tie would not apply the intended inbound/local BGP local preference policy consistently within the receiving AS.
D:Applying an appropriate Cisco-local BGP weight policy on the chosen router without expecting it to propagate to peers would not apply the intended inbound/local BGP local preference policy consistently within the receiving AS.
Implementing Cisco Enterprise Network Core Technologies (ENCOR) (350-401) Practice Tests