Question 260
After Harbor Metro deploys OSPF passive customer subnet to advertise an access subnet without accepting routing hellos from its subscribers, the primary acceptance check passes (the subnet is advertised but no OSPF customer adjacency forms). What remaining operational risk should still be part of the design review?
- Type-7 translation and default-route policy must be planned at the ABR.
- Feedback between protocols can cause loops if the route origin is not tagged.
- NSR requires platform and peer-specific feature support.
- A core-facing interface must not be made passive by mistake.
Explanation
Correct Answer
D:The relevant boundary of OSPF passive customer subnet is that a core-facing interface must not be made passive by mistake. Passing the acceptance test does not eliminate this residual operational risk.
Incorrect Answers
A:This concern applies to OSPF NSSA external translation in a different scenario where operators need to allow controlled external-route origination inside an NSSA area. For the deployed OSPF passive customer subnet approach, the relevant caution is instead that a core-facing interface must not be made passive by mistake.
B:This concern applies to controlled IGP to BGP redistribution in a different scenario where operators need to inject only selected IGP routes into BGP at an authorized boundary. For the deployed OSPF passive customer subnet approach, the relevant caution is instead that a core-facing interface must not be made passive by mistake.
C:This concern applies to NSR control-plane failover in a different scenario where operators need to preserve routing protocol state across a supported redundant control processor switchover. For the deployed OSPF passive customer subnet approach, the relevant caution is instead that a core-facing interface must not be made passive by mistake.
Question 261
Summit Service Provider must resolve unstable OSPF database state caused by two routers sharing a router ID. The operator is comparing several service-provider methods. Which design or control directly addresses that stated requirement?
- OSPF duplicate router identity
- OSPF NSSA external translation
- IS-IS authentication mismatch
- BGP prefix filtering
Explanation
Correct Answer
A:OSPF duplicate router identity matches this requirement: the team should assign unique router IDs and restore the affected adjacencies. A relevant outcome would be that each router originates unambiguous LSAs and neighbor state stabilizes.
Incorrect Answers
B:OSPF NSSA external translation instead addresses a different condition: allow controlled external-route origination inside an NSSA area. It would instead require you to configure NSSA behavior with appropriate Type-7 origination and translation at the border, not the stated goal to resolve unstable OSPF database state caused by two routers sharing a router ID.
C:IS-IS authentication mismatch instead addresses a different condition: recover an adjacency rejecting hello PDUs due to authentication differences. It would instead require you to correct matching IS-IS authentication method and keys for both ends, not the stated goal to resolve unstable OSPF database state caused by two routers sharing a router ID.
D:BGP prefix filtering instead addresses a different condition: stop a customer's accidental broad route advertisement at the provider ingress. It would instead require you to attach a prefix-set based inbound routing policy with exact allowed subnets, not the stated goal to resolve unstable OSPF database state caused by two routers sharing a router ID.
Question 262
At Ridgeway Networks, the engineering change is approved for OSPF duplicate router identity. The specific goal is to resolve unstable OSPF database state caused by two routers sharing a router ID. Which implementation step belongs in this change plan?
- Configure NSSA behavior with appropriate Type-7 origination and translation at the border.
- Assign unique router IDs and restore the affected adjacencies.
- Correct matching IS-IS authentication method and keys for both ends.
- Attach a prefix-set based inbound routing policy with exact allowed subnets.
Explanation
Correct Answer
B:Implementing OSPF duplicate router identity requires the operator to assign unique router IDs and restore the affected adjacencies. This makes the required goal testable using evidence that each router originates unambiguous LSAs and neighbor state stabilizes.
Incorrect Answers
A:The proposed step is for OSPF NSSA external translation, whose purpose is to allow controlled external-route origination inside an NSSA area. It would not perform the necessary OSPF duplicate router identity operation: assign unique router IDs and restore the affected adjacencies.
C:The proposed step is for IS-IS authentication mismatch, whose purpose is to recover an adjacency rejecting hello PDUs due to authentication differences. It would not perform the necessary OSPF duplicate router identity operation: assign unique router IDs and restore the affected adjacencies.
D:The proposed step is for BGP prefix filtering, whose purpose is to stop a customer's accidental broad route advertisement at the provider ingress. It would not perform the necessary OSPF duplicate router identity operation: assign unique router IDs and restore the affected adjacencies.
Question 263
Lakeside Transport has deployed OSPF duplicate router identity to resolve unstable OSPF database state caused by two routers sharing a router ID. The implementation step was to assign unique router IDs and restore the affected adjacencies. Which observation demonstrates that the requested service is working?
- NSSA-originated routes are visible as correct Type-7 and translated external reachability.
- Authenticated hello exchanges establish a stable adjacency.
- Each router originates unambiguous LSAs and neighbor state stabilizes.
- Only customer-authorized NLRI appear in the accepted BGP table.
Explanation
Correct Answer
C:For OSPF duplicate router identity, successful verification means that each router originates unambiguous LSAs and neighbor state stabilizes. That evidence directly tests whether the provider can resolve unstable OSPF database state caused by two routers sharing a router ID after deployment.
Incorrect Answers
A:The observation would verify OSPF NSSA external translation under the separate requirement to allow controlled external-route origination inside an NSSA area. It does not demonstrate the needed OSPF duplicate router identity result: each router originates unambiguous LSAs and neighbor state stabilizes.
B:The observation would verify IS-IS authentication mismatch under the separate requirement to recover an adjacency rejecting hello PDUs due to authentication differences. It does not demonstrate the needed OSPF duplicate router identity result: each router originates unambiguous LSAs and neighbor state stabilizes.
D:The observation would verify BGP prefix filtering under the separate requirement to stop a customer's accidental broad route advertisement at the provider ingress. It does not demonstrate the needed OSPF duplicate router identity result: each router originates unambiguous LSAs and neighbor state stabilizes.
Question 264
While troubleshooting OSPF duplicate router identity at Coastal Communications, the intended acceptance outcome is still missing: each router originates unambiguous LSAs and neighbor state stabilizes. Which fault condition should be investigated first for this particular design?
- An ordinary stub area is configured where external injection is required.
- The IP prefix advertisement is changed with no repair to PDU authentication.
- A matching outbound policy is applied instead of filtering received routes.
- IP packet MTU changes are made while router IDs still conflict.
Explanation
Correct Answer
D:The suspected defect directly frustrates OSPF duplicate router identity: IP packet MTU changes are made while router IDs still conflict. Correcting it should allow verification that each router originates unambiguous LSAs and neighbor state stabilizes.
Incorrect Answers
A:This defect belongs to OSPF NSSA external translation, where the affected outcome is to allow controlled external-route origination inside an NSSA area. It is not the direct failure mode identified for the OSPF duplicate router identity design in this case: IP packet MTU changes are made while router IDs still conflict.
B:This defect belongs to IS-IS authentication mismatch, where the affected outcome is to recover an adjacency rejecting hello PDUs due to authentication differences. It is not the direct failure mode identified for the OSPF duplicate router identity design in this case: IP packet MTU changes are made while router IDs still conflict.
C:This defect belongs to BGP prefix filtering, where the affected outcome is to stop a customer's accidental broad route advertisement at the provider ingress. It is not the direct failure mode identified for the OSPF duplicate router identity design in this case: IP packet MTU changes are made while router IDs still conflict.
Question 265
After Bluebird Infrastructure deploys OSPF duplicate router identity to resolve unstable OSPF database state caused by two routers sharing a router ID, the primary acceptance check passes (each router originates unambiguous LSAs and neighbor state stabilizes). What remaining operational risk should still be part of the design review?
- Router ID changes can require process restart or adjacency reformation.
- Type-7 translation and default-route policy must be planned at the ABR.
- Key rotation requires overlapping operational coordination at both peers.
- Prefix-set maintenance must track legitimate customer expansion.
Explanation
Correct Answer
A:The relevant boundary of OSPF duplicate router identity is that router ID changes can require process restart or adjacency reformation. Passing the acceptance test does not eliminate this residual operational risk.
Incorrect Answers
B:This concern applies to OSPF NSSA external translation in a different scenario where operators need to allow controlled external-route origination inside an NSSA area. For the deployed OSPF duplicate router identity approach, the relevant caution is instead that router ID changes can require process restart or adjacency reformation.
C:This concern applies to IS-IS authentication mismatch in a different scenario where operators need to recover an adjacency rejecting hello PDUs due to authentication differences. For the deployed OSPF duplicate router identity approach, the relevant caution is instead that router ID changes can require process restart or adjacency reformation.
D:This concern applies to BGP prefix filtering in a different scenario where operators need to stop a customer's accidental broad route advertisement at the provider ingress. For the deployed OSPF duplicate router identity approach, the relevant caution is instead that router ID changes can require process restart or adjacency reformation.
Question 266
Horizon Exchange must reduce inter-area LSA volume for contiguous customer prefixes. The operator is comparing several service-provider methods. Which design or control directly addresses that stated requirement?
- OSPF interface cost control
- OSPF route summarization
- OSPF area mismatch diagnosis
- CGNAT address sharing logging
Explanation
Correct Answer
B:OSPF route summarization matches this requirement: the team should advertise an appropriate summary at the area boundary. A relevant outcome would be that the backbone sees the intended aggregate while detail remains within the area.
Incorrect Answers
A:OSPF interface cost control instead addresses a different condition: favor a specific provider link with shorter calculated OSPF path cost. It would instead require you to set an appropriate OSPF interface cost rather than changing BGP policy, not the stated goal to reduce inter-area LSA volume for contiguous customer prefixes.
C:OSPF area mismatch diagnosis instead addresses a different condition: recover adjacency on a link whose routers are configured in different areas. It would instead require you to place both sides in the intended matching OSPF area, not the stated goal to reduce inter-area LSA volume for contiguous customer prefixes.
D:CGNAT address sharing logging instead addresses a different condition: serve multiple IPv4 subscribers from shared public address resources. It would instead require you to deploy stateful carrier-grade NAT with accurate address-port allocation logging, not the stated goal to reduce inter-area LSA volume for contiguous customer prefixes.
Question 267
At Cedar Wireless, the engineering change is approved for OSPF route summarization. The specific goal is to reduce inter-area LSA volume for contiguous customer prefixes. Which implementation step belongs in this change plan?
- Set an appropriate OSPF interface cost rather than changing BGP policy.
- Place both sides in the intended matching OSPF area.
- Advertise an appropriate summary at the area boundary.
- Deploy stateful carrier-grade NAT with accurate address-port allocation logging.
Explanation
Correct Answer
C:Implementing OSPF route summarization requires the operator to advertise an appropriate summary at the area boundary. This makes the required goal testable using evidence that the backbone sees the intended aggregate while detail remains within the area.
Incorrect Answers
A:The proposed step is for OSPF interface cost control, whose purpose is to favor a specific provider link with shorter calculated OSPF path cost. It would not perform the necessary OSPF route summarization operation: advertise an appropriate summary at the area boundary.
B:The proposed step is for OSPF area mismatch diagnosis, whose purpose is to recover adjacency on a link whose routers are configured in different areas. It would not perform the necessary OSPF route summarization operation: advertise an appropriate summary at the area boundary.
D:The proposed step is for CGNAT address sharing logging, whose purpose is to serve multiple IPv4 subscribers from shared public address resources. It would not perform the necessary OSPF route summarization operation: advertise an appropriate summary at the area boundary.
Question 268
Willow Regional has deployed OSPF route summarization to reduce inter-area LSA volume for contiguous customer prefixes. The implementation step was to advertise an appropriate summary at the area boundary. Which observation demonstrates that the requested service is working?
- The SPF tree and installed next hop reflect the new cumulative cost.
- Hello packets result in a valid adjacency and shared link-state database.
- Sessions reach the Internet and logs map translated tuples back to subscribers.
- The backbone sees the intended aggregate while detail remains within the area.
Explanation
Correct Answer
D:For OSPF route summarization, successful verification means that the backbone sees the intended aggregate while detail remains within the area. That evidence directly tests whether the provider can reduce inter-area LSA volume for contiguous customer prefixes after deployment.
Incorrect Answers
A:The observation would verify OSPF interface cost control under the separate requirement to favor a specific provider link with shorter calculated OSPF path cost. It does not demonstrate the needed OSPF route summarization result: the backbone sees the intended aggregate while detail remains within the area.
B:The observation would verify OSPF area mismatch diagnosis under the separate requirement to recover adjacency on a link whose routers are configured in different areas. It does not demonstrate the needed OSPF route summarization result: the backbone sees the intended aggregate while detail remains within the area.
C:The observation would verify CGNAT address sharing logging under the separate requirement to serve multiple IPv4 subscribers from shared public address resources. It does not demonstrate the needed OSPF route summarization result: the backbone sees the intended aggregate while detail remains within the area.
Question 269
While troubleshooting OSPF route summarization at Atlas Backbone, the intended acceptance outcome is still missing: the backbone sees the intended aggregate while detail remains within the area. Which fault condition should be investigated first for this particular design?
- Individual unrelated prefixes are redistributed without summary control.
- A local preference change is attempted even though only OSPF chooses the path.
- DR priority is changed although the OSPF area IDs remain incompatible.
- A shared source address is logged without ports or timestamps needed for attribution.
Explanation
Correct Answer
A:The suspected defect directly frustrates OSPF route summarization: individual unrelated prefixes are redistributed without summary control. Correcting it should allow verification that the backbone sees the intended aggregate while detail remains within the area.
Incorrect Answers
B:This defect belongs to OSPF interface cost control, where the affected outcome is to favor a specific provider link with shorter calculated OSPF path cost. It is not the direct failure mode identified for the OSPF route summarization design in this case: individual unrelated prefixes are redistributed without summary control.
C:This defect belongs to OSPF area mismatch diagnosis, where the affected outcome is to recover adjacency on a link whose routers are configured in different areas. It is not the direct failure mode identified for the OSPF route summarization design in this case: individual unrelated prefixes are redistributed without summary control.
D:This defect belongs to CGNAT address sharing logging, where the affected outcome is to serve multiple IPv4 subscribers from shared public address resources. It is not the direct failure mode identified for the OSPF route summarization design in this case: individual unrelated prefixes are redistributed without summary control.
Question 270
After Starlight IP Services deploys OSPF route summarization to reduce inter-area LSA volume for contiguous customer prefixes, the primary acceptance check passes (the backbone sees the intended aggregate while detail remains within the area). What remaining operational risk should still be part of the design review?
- All prefixes using the same OSPF route may change together.
- Bad summaries can blackhole destinations absent from the actual aggregate.
- The area correction may affect summarization and route propagation.
- NAT state and port exhaustion can restrict subscriber scale.
Explanation
Correct Answer
B:The relevant boundary of OSPF route summarization is that bad summaries can blackhole destinations absent from the actual aggregate. Passing the acceptance test does not eliminate this residual operational risk.
Incorrect Answers
A:This concern applies to OSPF interface cost control in a different scenario where operators need to favor a specific provider link with shorter calculated OSPF path cost. For the deployed OSPF route summarization approach, the relevant caution is instead that bad summaries can blackhole destinations absent from the actual aggregate.
C:This concern applies to OSPF area mismatch diagnosis in a different scenario where operators need to recover adjacency on a link whose routers are configured in different areas. For the deployed OSPF route summarization approach, the relevant caution is instead that bad summaries can blackhole destinations absent from the actual aggregate.
D:This concern applies to CGNAT address sharing logging in a different scenario where operators need to serve multiple IPv4 subscribers from shared public address resources. For the deployed OSPF route summarization approach, the relevant caution is instead that bad summaries can blackhole destinations absent from the actual aggregate.
Implementing and Operating Cisco Service Provider Network Core Technologies (SPCOR) (350-501) Practice Tests