Question 330
After Starlight IP Services deploys BGP community tagging policy to identify a class of routes consistently across multiple policy boundaries, the primary acceptance check passes (the community appears on accepted paths and triggers the correct handling). What remaining operational risk should still be part of the design review?
- The backup path still requires valid next-hop and adjacency resolution.
- Propagation policies must permit communities to cross intended peers.
- Feedback between protocols can cause loops if the route origin is not tagged.
- Applications embedding literal IPv4 addresses may need separate handling.
Explanation
Correct Answer
B:The relevant boundary of BGP community tagging policy is that propagation policies must permit communities to cross intended peers. Passing the acceptance test does not eliminate this residual operational risk.
Incorrect Answers
A:This concern applies to BGP PIC backup forwarding in a different scenario where operators need to maintain a programmed backup path for rapid edge failure response. For the deployed BGP community tagging policy approach, the relevant caution is instead that propagation policies must permit communities to cross intended peers.
C:This concern applies to controlled IGP to BGP redistribution in a different scenario where operators need to inject only selected IGP routes into BGP at an authorized boundary. For the deployed BGP community tagging policy approach, the relevant caution is instead that propagation policies must permit communities to cross intended peers.
D:This concern applies to NAT64 IPv6 client to IPv4 server in a different scenario where operators need to let IPv6-only clients reach IPv4-only destinations with appropriate translation. For the deployed BGP community tagging policy approach, the relevant caution is instead that propagation policies must permit communities to cross intended peers.
Question 331
Northstar Carrier must stop a customer's accidental broad route advertisement at the provider ingress. The operator is comparing several service-provider methods. Which design or control directly addresses that stated requirement?
- BGP iBGP multipath forwarding
- controlled IGP to BGP redistribution
- BGP prefix filtering
- RPL inbound AS-path policy
Explanation
Correct Answer
C:BGP prefix filtering matches this requirement: the team should attach a prefix-set based inbound routing policy with exact allowed subnets. A relevant outcome would be that only customer-authorized NLRI appear in the accepted BGP table.
Incorrect Answers
A:BGP iBGP multipath forwarding instead addresses a different condition: load-share among eligible equal-cost BGP routes instead of only one best path. It would instead require you to enable supported BGP multipath behavior within compatible path constraints, not the stated goal to stop a customer's accidental broad route advertisement at the provider ingress.
B:controlled IGP to BGP redistribution instead addresses a different condition: inject only selected IGP routes into BGP at an authorized boundary. It would instead require you to redistribute through a narrow route-policy rather than all learned IGP prefixes, not the stated goal to stop a customer's accidental broad route advertisement at the provider ingress.
D:RPL inbound AS-path policy instead addresses a different condition: reject untrusted routes with prohibited AS-path characteristics. It would instead require you to attach the intended IOS XR route-policy to the BGP neighbor inbound address family, not the stated goal to stop a customer's accidental broad route advertisement at the provider ingress.
Question 332
At Orion Transit, the engineering change is approved for BGP prefix filtering. The specific goal is to stop a customer's accidental broad route advertisement at the provider ingress. Which implementation step belongs in this change plan?
- Enable supported BGP multipath behavior within compatible path constraints.
- Redistribute through a narrow route-policy rather than all learned IGP prefixes.
- Attach the intended IOS XR route-policy to the BGP neighbor inbound address family.
- Attach a prefix-set based inbound routing policy with exact allowed subnets.
Explanation
Correct Answer
D:Implementing BGP prefix filtering requires the operator to attach a prefix-set based inbound routing policy with exact allowed subnets. This makes the required goal testable using evidence that only customer-authorized NLRI appear in the accepted BGP table.
Incorrect Answers
A:The proposed step is for BGP iBGP multipath forwarding, whose purpose is to load-share among eligible equal-cost BGP routes instead of only one best path. It would not perform the necessary BGP prefix filtering operation: attach a prefix-set based inbound routing policy with exact allowed subnets.
B:The proposed step is for controlled IGP to BGP redistribution, whose purpose is to inject only selected IGP routes into BGP at an authorized boundary. It would not perform the necessary BGP prefix filtering operation: attach a prefix-set based inbound routing policy with exact allowed subnets.
C:The proposed step is for RPL inbound AS-path policy, whose purpose is to reject untrusted routes with prohibited AS-path characteristics. It would not perform the necessary BGP prefix filtering operation: attach a prefix-set based inbound routing policy with exact allowed subnets.
Question 333
Meridian Networks has deployed BGP prefix filtering to stop a customer's accidental broad route advertisement at the provider ingress. The implementation step was to attach a prefix-set based inbound routing policy with exact allowed subnets. Which observation demonstrates that the requested service is working?
- Only customer-authorized NLRI appear in the accepted BGP table.
- Multiple eligible next hops appear in installed forwarding entries.
- The target BGP table contains only the documented permitted redistributed routes.
- The received route table excludes paths matching the denied condition.
Explanation
Correct Answer
A:For BGP prefix filtering, successful verification means that only customer-authorized NLRI appear in the accepted BGP table. That evidence directly tests whether the provider can stop a customer's accidental broad route advertisement at the provider ingress after deployment.
Incorrect Answers
B:The observation would verify BGP iBGP multipath forwarding under the separate requirement to load-share among eligible equal-cost BGP routes instead of only one best path. It does not demonstrate the needed BGP prefix filtering result: only customer-authorized NLRI appear in the accepted BGP table.
C:The observation would verify controlled IGP to BGP redistribution under the separate requirement to inject only selected IGP routes into BGP at an authorized boundary. It does not demonstrate the needed BGP prefix filtering result: only customer-authorized NLRI appear in the accepted BGP table.
D:The observation would verify RPL inbound AS-path policy under the separate requirement to reject untrusted routes with prohibited AS-path characteristics. It does not demonstrate the needed BGP prefix filtering result: only customer-authorized NLRI appear in the accepted BGP table.
Question 334
While troubleshooting BGP prefix filtering at Kestrel Broadband, the intended acceptance outcome is still missing: only customer-authorized NLRI appear in the accepted BGP table. Which fault condition should be investigated first for this particular design?
- Only one best route is programmed despite a requirement for multipath.
- A matching outbound policy is applied instead of filtering received routes.
- A broad redistribution rule leaks internal point-to-point infrastructure prefixes.
- The policy is applied outbound and the prohibited path remains accepted.
Explanation
Correct Answer
B:The suspected defect directly frustrates BGP prefix filtering: a matching outbound policy is applied instead of filtering received routes. Correcting it should allow verification that only customer-authorized NLRI appear in the accepted BGP table.
Incorrect Answers
A:This defect belongs to BGP iBGP multipath forwarding, where the affected outcome is to load-share among eligible equal-cost BGP routes instead of only one best path. It is not the direct failure mode identified for the BGP prefix filtering design in this case: a matching outbound policy is applied instead of filtering received routes.
C:This defect belongs to controlled IGP to BGP redistribution, where the affected outcome is to inject only selected IGP routes into BGP at an authorized boundary. It is not the direct failure mode identified for the BGP prefix filtering design in this case: a matching outbound policy is applied instead of filtering received routes.
D:This defect belongs to RPL inbound AS-path policy, where the affected outcome is to reject untrusted routes with prohibited AS-path characteristics. It is not the direct failure mode identified for the BGP prefix filtering design in this case: a matching outbound policy is applied instead of filtering received routes.
Question 335
After Harbor Metro deploys BGP prefix filtering to stop a customer's accidental broad route advertisement at the provider ingress, the primary acceptance check passes (only customer-authorized NLRI appear in the accepted BGP table). What remaining operational risk should still be part of the design review?
- Not every path is eligible; AS-path and attribute equivalence rules apply.
- Feedback between protocols can cause loops if the route origin is not tagged.
- Prefix-set maintenance must track legitimate customer expansion.
- Route-policy order can shadow more specific conditions.
Explanation
Correct Answer
C:The relevant boundary of BGP prefix filtering is that prefix-set maintenance must track legitimate customer expansion. Passing the acceptance test does not eliminate this residual operational risk.
Incorrect Answers
A:This concern applies to BGP iBGP multipath forwarding in a different scenario where operators need to load-share among eligible equal-cost BGP routes instead of only one best path. For the deployed BGP prefix filtering approach, the relevant caution is instead that prefix-set maintenance must track legitimate customer expansion.
B:This concern applies to controlled IGP to BGP redistribution in a different scenario where operators need to inject only selected IGP routes into BGP at an authorized boundary. For the deployed BGP prefix filtering approach, the relevant caution is instead that prefix-set maintenance must track legitimate customer expansion.
D:This concern applies to RPL inbound AS-path policy in a different scenario where operators need to reject untrusted routes with prohibited AS-path characteristics. For the deployed BGP prefix filtering approach, the relevant caution is instead that prefix-set maintenance must track legitimate customer expansion.
Question 336
Summit Service Provider must share more than one eligible path for a single prefix with supporting peers. The operator is comparing several service-provider methods. Which design or control directly addresses that stated requirement?
- BGP max-prefix protection
- BGP next-hop resolution failure
- NAT64 IPv6 client to IPv4 server
- BGP additional-path diversity
Explanation
Correct Answer
D:BGP additional-path diversity matches this requirement: the team should enable supported BGP additional-path selection and send/receive capabilities. A relevant outcome would be that neighbors receive distinct path identifiers and retain the selected alternatives.
Incorrect Answers
A:BGP max-prefix protection instead addresses a different condition: protect a provider edge from a customer's sudden route-table explosion. It would instead require you to configure an appropriate maximum-prefix threshold and response for the neighbor, not the stated goal to share more than one eligible path for a single prefix with supporting peers.
B:BGP next-hop resolution failure instead addresses a different condition: diagnose a valid BGP route absent from the forwarding RIB. It would instead require you to check recursion and IGP reachability for the advertised BGP next hop, not the stated goal to share more than one eligible path for a single prefix with supporting peers.
C:NAT64 IPv6 client to IPv4 server instead addresses a different condition: let IPv6-only clients reach IPv4-only destinations with appropriate translation. It would instead require you to deploy NAT64 with compatible DNS64 or explicit mapped-address discovery, not the stated goal to share more than one eligible path for a single prefix with supporting peers.
Question 337
At Ridgeway Networks, the engineering change is approved for BGP additional-path diversity. The specific goal is to share more than one eligible path for a single prefix with supporting peers. Which implementation step belongs in this change plan?
- Enable supported BGP additional-path selection and send/receive capabilities.
- Configure an appropriate maximum-prefix threshold and response for the neighbor.
- Check recursion and IGP reachability for the advertised BGP next hop.
- Deploy NAT64 with compatible DNS64 or explicit mapped-address discovery.
Explanation
Correct Answer
A:Implementing BGP additional-path diversity requires the operator to enable supported BGP additional-path selection and send/receive capabilities. This makes the required goal testable using evidence that neighbors receive distinct path identifiers and retain the selected alternatives.
Incorrect Answers
B:The proposed step is for BGP max-prefix protection, whose purpose is to protect a provider edge from a customer's sudden route-table explosion. It would not perform the necessary BGP additional-path diversity operation: enable supported BGP additional-path selection and send/receive capabilities.
C:The proposed step is for BGP next-hop resolution failure, whose purpose is to diagnose a valid BGP route absent from the forwarding RIB. It would not perform the necessary BGP additional-path diversity operation: enable supported BGP additional-path selection and send/receive capabilities.
D:The proposed step is for NAT64 IPv6 client to IPv4 server, whose purpose is to let IPv6-only clients reach IPv4-only destinations with appropriate translation. It would not perform the necessary BGP additional-path diversity operation: enable supported BGP additional-path selection and send/receive capabilities.
Question 338
Lakeside Transport has deployed BGP additional-path diversity to share more than one eligible path for a single prefix with supporting peers. The implementation step was to enable supported BGP additional-path selection and send/receive capabilities. Which observation demonstrates that the requested service is working?
- Accepted route counts stay within the agreed limit and alerts trigger near it.
- Neighbors receive distinct path identifiers and retain the selected alternatives.
- The BGP path becomes usable when the next hop resolves to a valid interface.
- IPv6 clients establish sessions to the IPv4 endpoints through a translator.
Explanation
Correct Answer
B:For BGP additional-path diversity, successful verification means that neighbors receive distinct path identifiers and retain the selected alternatives. That evidence directly tests whether the provider can share more than one eligible path for a single prefix with supporting peers after deployment.
Incorrect Answers
A:The observation would verify BGP max-prefix protection under the separate requirement to protect a provider edge from a customer's sudden route-table explosion. It does not demonstrate the needed BGP additional-path diversity result: neighbors receive distinct path identifiers and retain the selected alternatives.
C:The observation would verify BGP next-hop resolution failure under the separate requirement to diagnose a valid BGP route absent from the forwarding RIB. It does not demonstrate the needed BGP additional-path diversity result: neighbors receive distinct path identifiers and retain the selected alternatives.
D:The observation would verify NAT64 IPv6 client to IPv4 server under the separate requirement to let IPv6-only clients reach IPv4-only destinations with appropriate translation. It does not demonstrate the needed BGP additional-path diversity result: neighbors receive distinct path identifiers and retain the selected alternatives.
Question 339
While troubleshooting BGP additional-path diversity at Coastal Communications, the intended acceptance outcome is still missing: neighbors receive distinct path identifiers and retain the selected alternatives. Which fault condition should be investigated first for this particular design?
- A customer advertises uncontrolled routes until the router runs short of memory.
- More BGP prefixes are advertised while the existing next hop remains unreachable.
- A conventional single-best-path advertisement is assumed to include backups.
- An ordinary NAT44 rule is used expecting IPv6 hosts to connect through it.
Explanation
Correct Answer
C:The suspected defect directly frustrates BGP additional-path diversity: a conventional single-best-path advertisement is assumed to include backups. Correcting it should allow verification that neighbors receive distinct path identifiers and retain the selected alternatives.
Incorrect Answers
A:This defect belongs to BGP max-prefix protection, where the affected outcome is to protect a provider edge from a customer's sudden route-table explosion. It is not the direct failure mode identified for the BGP additional-path diversity design in this case: a conventional single-best-path advertisement is assumed to include backups.
B:This defect belongs to BGP next-hop resolution failure, where the affected outcome is to diagnose a valid BGP route absent from the forwarding RIB. It is not the direct failure mode identified for the BGP additional-path diversity design in this case: a conventional single-best-path advertisement is assumed to include backups.
D:This defect belongs to NAT64 IPv6 client to IPv4 server, where the affected outcome is to let IPv6-only clients reach IPv4-only destinations with appropriate translation. It is not the direct failure mode identified for the BGP additional-path diversity design in this case: a conventional single-best-path advertisement is assumed to include backups.
Question 340
After Bluebird Infrastructure deploys BGP additional-path diversity to share more than one eligible path for a single prefix with supporting peers, the primary acceptance check passes (neighbors receive distinct path identifiers and retain the selected alternatives). What remaining operational risk should still be part of the design review?
- Thresholds need allowance for normal growth and backup-route variation.
- The preferred control-plane path is not necessarily an installable FIB path.
- Applications embedding literal IPv4 addresses may need separate handling.
- Additional-path capability must be negotiated and policy-driven.
Explanation
Correct Answer
D:The relevant boundary of BGP additional-path diversity is that additional-path capability must be negotiated and policy-driven. Passing the acceptance test does not eliminate this residual operational risk.
Incorrect Answers
A:This concern applies to BGP max-prefix protection in a different scenario where operators need to protect a provider edge from a customer's sudden route-table explosion. For the deployed BGP additional-path diversity approach, the relevant caution is instead that additional-path capability must be negotiated and policy-driven.
B:This concern applies to BGP next-hop resolution failure in a different scenario where operators need to diagnose a valid BGP route absent from the forwarding RIB. For the deployed BGP additional-path diversity approach, the relevant caution is instead that additional-path capability must be negotiated and policy-driven.
C:This concern applies to NAT64 IPv6 client to IPv4 server in a different scenario where operators need to let IPv6-only clients reach IPv4-only destinations with appropriate translation. For the deployed BGP additional-path diversity approach, the relevant caution is instead that additional-path capability must be negotiated and policy-driven.
Implementing and Operating Cisco Service Provider Network Core Technologies (SPCOR) (350-501) Practice Tests