Question 480
A gateway migration changes VLAN subnet addresses but leaves HSRP peers configured with different virtual IPs. During troubleshooting: Each router reports local HSRP state but hosts see intermittent default-gateway ARP behavior. Which underlying cause best explains the recorded behavior?
- Peers disagree on virtual address/group configuration and cannot provide coherent redundancy.
- The NAT inside/outside interface roles are absent or reversed for packet direction.
- HSRP tracked-object policy does not detect or penalize upstream loss.
- The preferred HSRP peer lacks the intended preempt behavior or priority policy.
Explanation
Correct Answer
A:The actual technical cause is: Peers disagree on virtual address/group configuration and cannot provide coherent redundancy. It specifically explains the observation: each router reports local HSRP state but hosts see intermittent default-gateway ARP behavior. The correcting configuration is: configure the same correct virtual gateway IP and group parameters on both HSRP members.
Incorrect Answers
B:That diagnosis is supported by a different symptom: No translations are created for packets that otherwise match the source ACL. Here the recorded observation is: each router reports local HSRP state but hosts see intermittent default-gateway ARP behavior. The applicable cause is: peers disagree on virtual address/group configuration and cannot provide coherent redundancy.
C:That diagnosis is supported by a different symptom: Clients keep forwarding through an HSRP Active router with no WAN path. Here the recorded observation is: each router reports local HSRP state but hosts see intermittent default-gateway ARP behavior. The applicable cause is: peers disagree on virtual address/group configuration and cannot provide coherent redundancy.
D:That diagnosis is supported by a different symptom: The lower-priority router stays Active after the preferred router recovers although preemption was required. Here the recorded observation is: each router reports local HSRP state but hosts see intermittent default-gateway ARP behavior. The applicable cause is: peers disagree on virtual address/group configuration and cannot provide coherent redundancy.
Question 481
A gateway migration changes VLAN subnet addresses but leaves HSRP peers configured with different virtual IPs. The initial change is: Configure the same correct virtual gateway IP and group parameters on both HSRP members. Which continuing control most directly prevents a recurrence of the documented problem: Each router reports local HSRP state but hosts see intermittent default-gateway ARP behavior.
- Test recovery as well as failure when changing FHRP settings.
- Include role verification in NAT change templates for ISP circuit migrations.
- Use side-by-side HSRP peer configuration diffs after subnet migrations.
- Monitor tracked uplinks and dynamic FHRP priority changes during provider incidents.
Explanation
Correct Answer
C:The continuing protective control is: Use side-by-side HSRP peer configuration diffs after subnet migrations. This addresses the underlying failure mechanism: peers disagree on virtual address/group configuration and cannot provide coherent redundancy. The corresponding operational check is: check group virtual IP, authentication and hello settings at both routers.
Incorrect Answers
A:That control reduces a separate risk: The preferred HSRP peer lacks the intended preempt behavior or priority policy. For the described design, the recurring risk arises from: peers disagree on virtual address/group configuration and cannot provide coherent redundancy. The specific required safeguard is: use side-by-side HSRP peer configuration diffs after subnet migrations.
B:That control reduces a separate risk: The NAT inside/outside interface roles are absent or reversed for packet direction. For the described design, the recurring risk arises from: peers disagree on virtual address/group configuration and cannot provide coherent redundancy. The specific required safeguard is: use side-by-side HSRP peer configuration diffs after subnet migrations.
D:That control reduces a separate risk: HSRP tracked-object policy does not detect or penalize upstream loss. For the described design, the recurring risk arises from: peers disagree on virtual address/group configuration and cannot provide coherent redundancy. The specific required safeguard is: use side-by-side HSRP peer configuration diffs after subnet migrations.
Question 482
Multicast packets arrive on a router interface that is not on the expected return path toward the multicast source. The incident evidence is: Multicast traffic is dropped even though the receiver has joined the group. Which targeted configuration or design change best addresses the failure?
- Provide a reachable RP for the PIM-SM any-source multicast groups, respecting PIM neighbor and RPF state.
- Use IGMPv3 source filters and an appropriate PIM SSM range rather than any-source RP reliance.
- Select supported bidirectional PIM with a properly established RP and designated-forwarder behavior.
- Follow RPF checks by ensuring unicast routing toward the multicast source identifies the receiving interface.
Explanation
Correct Answer
D:The required correction is: Follow RPF checks by ensuring unicast routing toward the multicast source identifies the receiving interface. The underlying failure mechanism is: Incoming multicast violates reverse-path forwarding against the unicast route to the source. Verify success by carrying out this direct test: inspect multicast RPF interface, source route and drop counters for the (S,G) stream.
Incorrect Answers
A:Providing a reachable RP for the PIM-SM any-source multicast groups, respecting PIM neighbor and RPF state would not address the need for follow RPF checks by ensuring unicast routing toward the multicast source identifies the receiving interface.
B:Using IGMPv3 source filters and an appropriate PIM SSM range rather than any-source RP reliance would not address the need for follow RPF checks by ensuring unicast routing toward the multicast source identifies the receiving interface.
C:Selecting supported bidirectional PIM with a properly established RP and designated-forwarder behavior would not address the need for follow RPF checks by ensuring unicast routing toward the multicast source identifies the receiving interface.
Question 483
Multicast packets arrive on a router interface that is not on the expected return path toward the multicast source. The proposed remedy is: Follow RPF checks by ensuring unicast routing toward the multicast source identifies the receiving interface. Which observation would most directly confirm that remedy works as intended?
- Verify bidirectional group tree state and upstream/downstream forwarding from multiple sources.
- Check the RP mapping and (*,G)/(S,G) tree progression after receiver joins.
- Inspect multicast RPF interface, source route and drop counters for the (S,G) stream.
- Inspect (S,G) subscriptions for the allowed source and confirm other sources are excluded.
Explanation
Correct Answer
C:The decisive acceptance observation is: Inspect multicast RPF interface, source route and drop counters for the (S,G) stream. This tests the working mechanism, while the original incident was: multicast traffic is dropped even though the receiver has joined the group.
Incorrect Answers
A:This test measures a different behavior: Verify bidirectional group tree state and upstream/downstream forwarding from multiple sources. It does not establish the target outcome. For the documented fault, the direct acceptance test is: inspect multicast RPF interface, source route and drop counters for the (S,G) stream.
B:This test measures a different behavior: Check the RP mapping and (*,G)/(S,G) tree progression after receiver joins. It does not establish the target outcome. For the documented fault, the direct acceptance test is: inspect multicast RPF interface, source route and drop counters for the (S,G) stream.
D:This test measures a different behavior: Inspect (S,G) subscriptions for the allowed source and confirm other sources are excluded. It does not establish the target outcome. For the documented fault, the direct acceptance test is: inspect multicast RPF interface, source route and drop counters for the (S,G) stream.
Question 484
Multicast packets arrive on a router interface that is not on the expected return path toward the multicast source. During troubleshooting: Multicast traffic is dropped even though the receiver has joined the group. Which underlying cause best explains the recorded behavior?
- The required PIM bidirectional shared-tree/RP design was not consistently enabled.
- Incoming multicast violates reverse-path forwarding against the unicast route to the source.
- PIM sparse-mode shared-tree RP signaling or reachability is incomplete.
- Source-specific membership signaling or SSM configuration was not enforced at the receiver edge.
Explanation
Correct Answer
B:The actual technical cause is: Incoming multicast violates reverse-path forwarding against the unicast route to the source. It specifically explains the observation: multicast traffic is dropped even though the receiver has joined the group. The correcting configuration is: follow RPF checks by ensuring unicast routing toward the multicast source identifies the receiving interface.
Incorrect Answers
A:That diagnosis is supported by a different symptom: A bidirectional group receives data only from one source because the network was built on incompatible source-tree assumptions. Here the recorded observation is: multicast traffic is dropped even though the receiver has joined the group. The applicable cause is: incoming multicast violates reverse-path forwarding against the unicast route to the source.
C:That diagnosis is supported by a different symptom: IGMP membership appears on the last-hop router but no ASM source traffic reaches receivers. Here the recorded observation is: multicast traffic is dropped even though the receiver has joined the group. The applicable cause is: incoming multicast violates reverse-path forwarding against the unicast route to the source.
D:That diagnosis is supported by a different symptom: Receiver sees multicast data from an unapproved source within the same group address. Here the recorded observation is: multicast traffic is dropped even though the receiver has joined the group. The applicable cause is: incoming multicast violates reverse-path forwarding against the unicast route to the source.
Question 485
Multicast packets arrive on a router interface that is not on the expected return path toward the multicast source. The initial change is: Follow RPF checks by ensuring unicast routing toward the multicast source identifies the receiving interface. Which continuing control most directly prevents a recurrence of the documented problem: Multicast traffic is dropped even though the receiver has joined the group.
- Validate DF elections and bidirectional group address assignments across routing changes.
- Review IGMPv3 receiver compatibility and source filters after application changes.
- Monitor RP availability and multicast tree state separately from IGMP subscriptions.
- Validate multicast RPF under alternate-path routing and asymmetric provider changes.
Explanation
Correct Answer
D:The continuing protective control is: Validate multicast RPF under alternate-path routing and asymmetric provider changes. This addresses the underlying failure mechanism: incoming multicast violates reverse-path forwarding against the unicast route to the source. The corresponding operational check is: inspect multicast RPF interface, source route and drop counters for the (S,G) stream.
Incorrect Answers
A:That control reduces a separate risk: The required PIM bidirectional shared-tree/RP design was not consistently enabled. For the described design, the recurring risk arises from: incoming multicast violates reverse-path forwarding against the unicast route to the source. The specific required safeguard is: validate multicast RPF under alternate-path routing and asymmetric provider changes.
B:That control reduces a separate risk: Source-specific membership signaling or SSM configuration was not enforced at the receiver edge. For the described design, the recurring risk arises from: incoming multicast violates reverse-path forwarding against the unicast route to the source. The specific required safeguard is: validate multicast RPF under alternate-path routing and asymmetric provider changes.
C:That control reduces a separate risk: PIM sparse-mode shared-tree RP signaling or reachability is incomplete. For the described design, the recurring risk arises from: incoming multicast violates reverse-path forwarding against the unicast route to the source. The specific required safeguard is: validate multicast RPF under alternate-path routing and asymmetric provider changes.
Question 486
A sparse-mode multicast network has interested receivers but no rendezvous-point discovery/registration for ASM group traffic. The incident evidence is: IGMP membership appears on the last-hop router but no ASM source traffic reaches receivers. Which targeted configuration or design change best addresses the failure?
- Follow RPF checks by ensuring unicast routing toward the multicast source identifies the receiving interface.
- Use IGMPv3 source filters and an appropriate PIM SSM range rather than any-source RP reliance.
- Provide a reachable RP for the PIM-SM any-source multicast groups, respecting PIM neighbor and RPF state.
- Configure a reachable, approved NTP server and appropriate authentication where supported.
Explanation
Correct Answer
C:The required correction is: Provide a reachable RP for the PIM-SM any-source multicast groups, respecting PIM neighbor and RPF state. The underlying failure mechanism is: PIM sparse-mode shared-tree RP signaling or reachability is incomplete. Verify success by carrying out this direct test: check the RP mapping and (*,G)/(S,G) tree progression after receiver joins.
Incorrect Answers
A:Follow RPF checks by ensuring unicast routing toward the multicast source identifies the receiving interface would not provide a reachable RP for the PIM-SM any-source multicast groups, respecting PIM neighbor and RPF state.
B:Using IGMPv3 source filters and an appropriate PIM SSM range rather than any-source RP reliance would not provide a reachable RP for the PIM-SM any-source multicast groups, respecting PIM neighbor and RPF state.
D:Configuring a reachable, approved NTP server and appropriate authentication where supported would not provide a reachable RP for the PIM-SM any-source multicast groups, respecting PIM neighbor and RPF state.
Question 487
A sparse-mode multicast network has interested receivers but no rendezvous-point discovery/registration for ASM group traffic. The proposed remedy is: Provide a reachable RP for the PIM-SM any-source multicast groups, respecting PIM neighbor and RPF state. Which observation would most directly confirm that remedy works as intended?
- Inspect multicast RPF interface, source route and drop counters for the (S,G) stream.
- Inspect (S,G) subscriptions for the allowed source and confirm other sources are excluded.
- Check the RP mapping and (*,G)/(S,G) tree progression after receiver joins.
- Compare NTP association reachability, synchronization state and offset to the authoritative time source.
Explanation
Correct Answer
C:The decisive acceptance observation is: Check the RP mapping and (*,G)/(S,G) tree progression after receiver joins. This tests the working mechanism, while the original incident was: iGMP membership appears on the last-hop router but no ASM source traffic reaches receivers.
Incorrect Answers
A:This test measures a different behavior: Inspect multicast RPF interface, source route and drop counters for the (S,G) stream. It does not establish the target outcome. For the documented fault, the direct acceptance test is: check the RP mapping and (*,G)/(S,G) tree progression after receiver joins.
B:This test measures a different behavior: Inspect (S,G) subscriptions for the allowed source and confirm other sources are excluded. It does not establish the target outcome. For the documented fault, the direct acceptance test is: check the RP mapping and (*,G)/(S,G) tree progression after receiver joins.
D:This test measures a different behavior: Compare NTP association reachability, synchronization state and offset to the authoritative time source. It does not establish the target outcome. For the documented fault, the direct acceptance test is: check the RP mapping and (*,G)/(S,G) tree progression after receiver joins.
Question 488
A sparse-mode multicast network has interested receivers but no rendezvous-point discovery/registration for ASM group traffic. During troubleshooting: IGMP membership appears on the last-hop router but no ASM source traffic reaches receivers. Which underlying cause best explains the recorded behavior?
- PIM sparse-mode shared-tree RP signaling or reachability is incomplete.
- The configured NTP source is unreachable or not accepted for synchronization.
- Source-specific membership signaling or SSM configuration was not enforced at the receiver edge.
- Incoming multicast violates reverse-path forwarding against the unicast route to the source.
Explanation
Correct Answer
A:The actual technical cause is: PIM sparse-mode shared-tree RP signaling or reachability is incomplete. It specifically explains the observation: iGMP membership appears on the last-hop router but no ASM source traffic reaches receivers. The correcting configuration is: provide a reachable RP for the PIM-SM any-source multicast groups, respecting PIM neighbor and RPF state.
Incorrect Answers
B:That diagnosis is supported by a different symptom: Syslog timestamps drift because the switch is not synchronized to any valid NTP peer. Here the recorded observation is: iGMP membership appears on the last-hop router but no ASM source traffic reaches receivers. The applicable cause is: pIM sparse-mode shared-tree RP signaling or reachability is incomplete.
C:That diagnosis is supported by a different symptom: Receiver sees multicast data from an unapproved source within the same group address. Here the recorded observation is: iGMP membership appears on the last-hop router but no ASM source traffic reaches receivers. The applicable cause is: pIM sparse-mode shared-tree RP signaling or reachability is incomplete.
D:That diagnosis is supported by a different symptom: Multicast traffic is dropped even though the receiver has joined the group. Here the recorded observation is: iGMP membership appears on the last-hop router but no ASM source traffic reaches receivers. The applicable cause is: pIM sparse-mode shared-tree RP signaling or reachability is incomplete.
Question 489
A sparse-mode multicast network has interested receivers but no rendezvous-point discovery/registration for ASM group traffic. The initial change is: Provide a reachable RP for the PIM-SM any-source multicast groups, respecting PIM neighbor and RPF state. Which continuing control most directly prevents a recurrence of the documented problem: IGMP membership appears on the last-hop router but no ASM source traffic reaches receivers.
- Monitor RP availability and multicast tree state separately from IGMP subscriptions.
- Monitor sync state and authenticated time sources, not just a configured server line.
- Validate multicast RPF under alternate-path routing and asymmetric provider changes.
- Review IGMPv3 receiver compatibility and source filters after application changes.
Explanation
Correct Answer
A:The continuing protective control is: Monitor RP availability and multicast tree state separately from IGMP subscriptions. This addresses the underlying failure mechanism: pIM sparse-mode shared-tree RP signaling or reachability is incomplete. The corresponding operational check is: check the RP mapping and (*,G)/(S,G) tree progression after receiver joins.
Incorrect Answers
B:That control reduces a separate risk: The configured NTP source is unreachable or not accepted for synchronization. For the described design, the recurring risk arises from: pIM sparse-mode shared-tree RP signaling or reachability is incomplete. The specific required safeguard is: monitor RP availability and multicast tree state separately from IGMP subscriptions.
C:That control reduces a separate risk: Incoming multicast violates reverse-path forwarding against the unicast route to the source. For the described design, the recurring risk arises from: pIM sparse-mode shared-tree RP signaling or reachability is incomplete. The specific required safeguard is: monitor RP availability and multicast tree state separately from IGMP subscriptions.
D:That control reduces a separate risk: Source-specific membership signaling or SSM configuration was not enforced at the receiver edge. For the described design, the recurring risk arises from: pIM sparse-mode shared-tree RP signaling or reachability is incomplete. The specific required safeguard is: monitor RP availability and multicast tree state separately from IGMP subscriptions.
Question 490
A security multicast feed uses source-specific multicast and must admit group232.1.1.1 traffic only from 198.51.100.9. The incident evidence is: Receiver sees multicast data from an unapproved source within the same group address. Which targeted configuration or design change best addresses the failure?
- Configure static inside-source NAT mapping the exact internal host to the approved routable address.
- Follow RPF checks by ensuring unicast routing toward the multicast source identifies the receiving interface.
- Select supported bidirectional PIM with a properly established RP and designated-forwarder behavior.
- Use IGMPv3 source filters and an appropriate PIM SSM range rather than any-source RP reliance.
Explanation
Correct Answer
D:The required correction is: Use IGMPv3 source filters and an appropriate PIM SSM range rather than any-source RP reliance. The underlying failure mechanism is: Source-specific membership signaling or SSM configuration was not enforced at the receiver edge. Verify success by carrying out this direct test: inspect (S,G) subscriptions for the allowed source and confirm other sources are excluded.
Incorrect Answers
A:Configuring static inside-source NAT mapping the exact internal host to the approved routable address would not meet the need for iGMPv3 source filters and an appropriate PIM SSM range rather than any-source RP reliance.
B:Follow RPF checks by ensuring unicast routing toward the multicast source identifies the receiving interface would not meet the need for iGMPv3 source filters and an appropriate PIM SSM range rather than any-source RP reliance.
C:Selecting supported bidirectional PIM with a properly established RP and designated-forwarder behavior would not meet the need for iGMPv3 source filters and an appropriate PIM SSM range rather than any-source RP reliance.
Implementing Cisco Enterprise Network Core Technologies (ENCOR) (350-401) Practice Tests