Question 340
After Bluebird Infrastructure deploys BGP additional-path diversity to share more than one eligible path for a single prefix with supporting peers, the primary acceptance check passes (neighbors receive distinct path identifiers and retain the selected alternatives). What remaining operational risk should still be part of the design review?
- Thresholds need allowance for normal growth and backup-route variation.
- The preferred control-plane path is not necessarily an installable FIB path.
- Applications embedding literal IPv4 addresses may need separate handling.
- Additional-path capability must be negotiated and policy-driven.
Explanation
Correct Answer
D:The relevant boundary of BGP additional-path diversity is that additional-path capability must be negotiated and policy-driven. Passing the acceptance test does not eliminate this residual operational risk.
Incorrect Answers
A:This concern applies to BGP max-prefix protection in a different scenario where operators need to protect a provider edge from a customer's sudden route-table explosion. For the deployed BGP additional-path diversity approach, the relevant caution is instead that additional-path capability must be negotiated and policy-driven.
B:This concern applies to BGP next-hop resolution failure in a different scenario where operators need to diagnose a valid BGP route absent from the forwarding RIB. For the deployed BGP additional-path diversity approach, the relevant caution is instead that additional-path capability must be negotiated and policy-driven.
C:This concern applies to NAT64 IPv6 client to IPv4 server in a different scenario where operators need to let IPv6-only clients reach IPv4-only destinations with appropriate translation. For the deployed BGP additional-path diversity approach, the relevant caution is instead that additional-path capability must be negotiated and policy-driven.
Question 341
Horizon Exchange must maintain a programmed backup path for rapid edge failure response. The operator is comparing several service-provider methods. Which design or control directly addresses that stated requirement?
- BGP PIC backup forwarding
- BGP max-prefix protection
- IS-IS authentication mismatch
- OSPF stub area constraint
Explanation
Correct Answer
A:BGP PIC backup forwarding matches this requirement: the team should apply BGP PIC backup-path selection with the appropriate FIB programming. A relevant outcome would be that the primary and backup forwarding paths are ready before link failure.
Incorrect Answers
B:BGP max-prefix protection instead addresses a different condition: protect a provider edge from a customer's sudden route-table explosion. It would instead require you to configure an appropriate maximum-prefix threshold and response for the neighbor, not the stated goal to maintain a programmed backup path for rapid edge failure response.
C:IS-IS authentication mismatch instead addresses a different condition: recover an adjacency rejecting hello PDUs due to authentication differences. It would instead require you to correct matching IS-IS authentication method and keys for both ends, not the stated goal to maintain a programmed backup path for rapid edge failure response.
D:OSPF stub area constraint instead addresses a different condition: limit Type-5 external LSAs within a supported stub area. It would instead require you to configure consistent stub-area settings on all routers in the area, not the stated goal to maintain a programmed backup path for rapid edge failure response.
Question 342
At Cedar Wireless, the engineering change is approved for BGP PIC backup forwarding. The specific goal is to maintain a programmed backup path for rapid edge failure response. Which implementation step belongs in this change plan?
- Configure an appropriate maximum-prefix threshold and response for the neighbor.
- Apply BGP PIC backup-path selection with the appropriate FIB programming.
- Correct matching IS-IS authentication method and keys for both ends.
- Configure consistent stub-area settings on all routers in the area.
Explanation
Correct Answer
B:Implementing BGP PIC backup forwarding requires the operator to apply BGP PIC backup-path selection with the appropriate FIB programming. This makes the required goal testable using evidence that the primary and backup forwarding paths are ready before link failure.
Incorrect Answers
A:The proposed step is for BGP max-prefix protection, whose purpose is to protect a provider edge from a customer's sudden route-table explosion. It would not perform the necessary BGP PIC backup forwarding operation: apply BGP PIC backup-path selection with the appropriate FIB programming.
C:The proposed step is for IS-IS authentication mismatch, whose purpose is to recover an adjacency rejecting hello PDUs due to authentication differences. It would not perform the necessary BGP PIC backup forwarding operation: apply BGP PIC backup-path selection with the appropriate FIB programming.
D:The proposed step is for OSPF stub area constraint, whose purpose is to limit Type-5 external LSAs within a supported stub area. It would not perform the necessary BGP PIC backup forwarding operation: apply BGP PIC backup-path selection with the appropriate FIB programming.
Question 343
Willow Regional has deployed BGP PIC backup forwarding to maintain a programmed backup path for rapid edge failure response. The implementation step was to apply BGP PIC backup-path selection with the appropriate FIB programming. Which observation demonstrates that the requested service is working?
- Accepted route counts stay within the agreed limit and alerts trigger near it.
- Authenticated hello exchanges establish a stable adjacency.
- The primary and backup forwarding paths are ready before link failure.
- The stub area uses required default routing without external Type-5 LSAs.
Explanation
Correct Answer
C:For BGP PIC backup forwarding, successful verification means that the primary and backup forwarding paths are ready before link failure. That evidence directly tests whether the provider can maintain a programmed backup path for rapid edge failure response after deployment.
Incorrect Answers
A:The observation would verify BGP max-prefix protection under the separate requirement to protect a provider edge from a customer's sudden route-table explosion. It does not demonstrate the needed BGP PIC backup forwarding result: the primary and backup forwarding paths are ready before link failure.
B:The observation would verify IS-IS authentication mismatch under the separate requirement to recover an adjacency rejecting hello PDUs due to authentication differences. It does not demonstrate the needed BGP PIC backup forwarding result: the primary and backup forwarding paths are ready before link failure.
D:The observation would verify OSPF stub area constraint under the separate requirement to limit Type-5 external LSAs within a supported stub area. It does not demonstrate the needed BGP PIC backup forwarding result: the primary and backup forwarding paths are ready before link failure.
Question 344
While troubleshooting BGP PIC backup forwarding at Atlas Backbone, the intended acceptance outcome is still missing: the primary and backup forwarding paths are ready before link failure. Which fault condition should be investigated first for this particular design?
- A customer advertises uncontrolled routes until the router runs short of memory.
- The IP prefix advertisement is changed with no repair to PDU authentication.
- One neighbor keeps normal-area settings and the stub adjacency fails.
- Backup routes exist in control plane but no PIC backup is programmed in FIB.
Explanation
Correct Answer
D:The suspected defect directly frustrates BGP PIC backup forwarding: backup routes exist in control plane but no PIC backup is programmed in FIB. Correcting it should allow verification that the primary and backup forwarding paths are ready before link failure.
Incorrect Answers
A:This defect belongs to BGP max-prefix protection, where the affected outcome is to protect a provider edge from a customer's sudden route-table explosion. It is not the direct failure mode identified for the BGP PIC backup forwarding design in this case: backup routes exist in control plane but no PIC backup is programmed in FIB.
B:This defect belongs to IS-IS authentication mismatch, where the affected outcome is to recover an adjacency rejecting hello PDUs due to authentication differences. It is not the direct failure mode identified for the BGP PIC backup forwarding design in this case: backup routes exist in control plane but no PIC backup is programmed in FIB.
C:This defect belongs to OSPF stub area constraint, where the affected outcome is to limit Type-5 external LSAs within a supported stub area. It is not the direct failure mode identified for the BGP PIC backup forwarding design in this case: backup routes exist in control plane but no PIC backup is programmed in FIB.
Question 345
After Starlight IP Services deploys BGP PIC backup forwarding to maintain a programmed backup path for rapid edge failure response, the primary acceptance check passes (the primary and backup forwarding paths are ready before link failure). What remaining operational risk should still be part of the design review?
- The backup path still requires valid next-hop and adjacency resolution.
- Thresholds need allowance for normal growth and backup-route variation.
- Key rotation requires overlapping operational coordination at both peers.
- A stub area cannot independently host an ordinary ASBR advertising externals.
Explanation
Correct Answer
A:The relevant boundary of BGP PIC backup forwarding is that the backup path still requires valid next-hop and adjacency resolution. Passing the acceptance test does not eliminate this residual operational risk.
Incorrect Answers
B:This concern applies to BGP max-prefix protection in a different scenario where operators need to protect a provider edge from a customer's sudden route-table explosion. For the deployed BGP PIC backup forwarding approach, the relevant caution is instead that the backup path still requires valid next-hop and adjacency resolution.
C:This concern applies to IS-IS authentication mismatch in a different scenario where operators need to recover an adjacency rejecting hello PDUs due to authentication differences. For the deployed BGP PIC backup forwarding approach, the relevant caution is instead that the backup path still requires valid next-hop and adjacency resolution.
D:This concern applies to OSPF stub area constraint in a different scenario where operators need to limit Type-5 external LSAs within a supported stub area. For the deployed BGP PIC backup forwarding approach, the relevant caution is instead that the backup path still requires valid next-hop and adjacency resolution.
Question 346
Northstar Carrier must ensure an external BGP session establishes only with peers possessing the agreed session authentication material. The operator is comparing several service-provider methods. Which design or control directly addresses that stated requirement?
- BGP remote AS alignment
- BGP neighbor TCP authentication
- OSPF authentication consistency
- BGP local preference exit policy
Explanation
Correct Answer
B:BGP neighbor TCP authentication matches this requirement: the team should configure supported matching BGP neighbor TCP authentication credentials at both peers. A relevant outcome would be that the BGP neighbor reaches Established only when peers use matching authentication keys.
Incorrect Answers
A:BGP remote AS alignment instead addresses a different condition: form an external BGP peering between provider and customer autonomous systems. It would instead require you to configure each peer with the other's correct remote AS and IP reachability, not the stated goal to ensure an external BGP session establishes only with peers possessing the agreed session authentication material.
C:OSPF authentication consistency instead addresses a different condition: prevent unauthenticated route participation across a core adjacency. It would instead require you to configure matching supported OSPF authentication and key material, not the stated goal to ensure an external BGP session establishes only with peers possessing the agreed session authentication material.
D:BGP local preference exit policy instead addresses a different condition: make internal routers prefer one provider egress for outbound traffic. It would instead require you to set a higher BGP local preference on the preferred path within the AS, not the stated goal to ensure an external BGP session establishes only with peers possessing the agreed session authentication material.
Question 347
At Orion Transit, the engineering change is approved for BGP neighbor TCP authentication. The specific goal is to ensure an external BGP session establishes only with peers possessing the agreed session authentication material. Which implementation step belongs in this change plan?
- Configure each peer with the other's correct remote AS and IP reachability.
- Configure matching supported OSPF authentication and key material.
- Configure supported matching BGP neighbor TCP authentication credentials at both peers.
- Set a higher BGP local preference on the preferred path within the AS.
Explanation
Correct Answer
C:Implementing BGP neighbor TCP authentication requires the operator to configure supported matching BGP neighbor TCP authentication credentials at both peers. This makes the required goal testable using evidence that the BGP neighbor reaches Established only when peers use matching authentication keys.
Incorrect Answers
A:The proposed step is for BGP remote AS alignment, whose purpose is to form an external BGP peering between provider and customer autonomous systems. It would not perform the necessary BGP neighbor TCP authentication operation: configure supported matching BGP neighbor TCP authentication credentials at both peers.
B:The proposed step is for OSPF authentication consistency, whose purpose is to prevent unauthenticated route participation across a core adjacency. It would not perform the necessary BGP neighbor TCP authentication operation: configure supported matching BGP neighbor TCP authentication credentials at both peers.
D:The proposed step is for BGP local preference exit policy, whose purpose is to make internal routers prefer one provider egress for outbound traffic. It would not perform the necessary BGP neighbor TCP authentication operation: configure supported matching BGP neighbor TCP authentication credentials at both peers.
Question 348
Meridian Networks has deployed BGP neighbor TCP authentication to ensure an external BGP session establishes only with peers possessing the agreed session authentication material. The implementation step was to configure supported matching BGP neighbor TCP authentication credentials at both peers. Which observation demonstrates that the requested service is working?
- The BGP finite state machine reaches Established and routes exchange under policy.
- The neighbor relation is established with authentication enforced.
- IBGP routers prefer the agreed egress when policy applies.
- The BGP neighbor reaches Established only when peers use matching authentication keys.
Explanation
Correct Answer
D:For BGP neighbor TCP authentication, successful verification means that the BGP neighbor reaches Established only when peers use matching authentication keys. That evidence directly tests whether the provider can ensure an external BGP session establishes only with peers possessing the agreed session authentication material after deployment.
Incorrect Answers
A:The observation would verify BGP remote AS alignment under the separate requirement to form an external BGP peering between provider and customer autonomous systems. It does not demonstrate the needed BGP neighbor TCP authentication result: the BGP neighbor reaches Established only when peers use matching authentication keys.
B:The observation would verify OSPF authentication consistency under the separate requirement to prevent unauthenticated route participation across a core adjacency. It does not demonstrate the needed BGP neighbor TCP authentication result: the BGP neighbor reaches Established only when peers use matching authentication keys.
C:The observation would verify BGP local preference exit policy under the separate requirement to make internal routers prefer one provider egress for outbound traffic. It does not demonstrate the needed BGP neighbor TCP authentication result: the BGP neighbor reaches Established only when peers use matching authentication keys.
Question 349
While troubleshooting BGP neighbor TCP authentication at Kestrel Broadband, the intended acceptance outcome is still missing: the BGP neighbor reaches Established only when peers use matching authentication keys. Which fault condition should be investigated first for this particular design?
- The BGP TCP session never establishes because neighbor authentication keys differ.
- A neighbor is configured with the provider's local AS instead of the customer AS.
- One router accepts unauthenticated hellos while the other expects integrity checks.
- MED is adjusted expecting it to override a local-preference difference.
Explanation
Correct Answer
A:The suspected defect directly frustrates BGP neighbor TCP authentication: the BGP TCP session never establishes because neighbor authentication keys differ. Correcting it should allow verification that the BGP neighbor reaches Established only when peers use matching authentication keys.
Incorrect Answers
B:This defect belongs to BGP remote AS alignment, where the affected outcome is to form an external BGP peering between provider and customer autonomous systems. It is not the direct failure mode identified for the BGP neighbor TCP authentication design in this case: the BGP TCP session never establishes because neighbor authentication keys differ.
C:This defect belongs to OSPF authentication consistency, where the affected outcome is to prevent unauthenticated route participation across a core adjacency. It is not the direct failure mode identified for the BGP neighbor TCP authentication design in this case: the BGP TCP session never establishes because neighbor authentication keys differ.
D:This defect belongs to BGP local preference exit policy, where the affected outcome is to make internal routers prefer one provider egress for outbound traffic. It is not the direct failure mode identified for the BGP neighbor TCP authentication design in this case: the BGP TCP session never establishes because neighbor authentication keys differ.
Question 350
After Harbor Metro deploys BGP neighbor TCP authentication to ensure an external BGP session establishes only with peers possessing the agreed session authentication material, the primary acceptance check passes (the BGP neighbor reaches Established only when peers use matching authentication keys). What remaining operational risk should still be part of the design review?
- EBGP policy and prefix filtering are still required after peering forms.
- Key rotation and credential synchronization must avoid unexpected peering outages.
- Key rollover must avoid transient adjacency loss.
- Local preference is an internal-AS policy and not exported to eBGP peers.
Explanation
Correct Answer
B:The relevant boundary of BGP neighbor TCP authentication is that key rotation and credential synchronization must avoid unexpected peering outages. Passing the acceptance test does not eliminate this residual operational risk.
Incorrect Answers
A:This concern applies to BGP remote AS alignment in a different scenario where operators need to form an external BGP peering between provider and customer autonomous systems. For the deployed BGP neighbor TCP authentication approach, the relevant caution is instead that key rotation and credential synchronization must avoid unexpected peering outages.
C:This concern applies to OSPF authentication consistency in a different scenario where operators need to prevent unauthenticated route participation across a core adjacency. For the deployed BGP neighbor TCP authentication approach, the relevant caution is instead that key rotation and credential synchronization must avoid unexpected peering outages.
D:This concern applies to BGP local preference exit policy in a different scenario where operators need to make internal routers prefer one provider egress for outbound traffic. For the deployed BGP neighbor TCP authentication approach, the relevant caution is instead that key rotation and credential synchronization must avoid unexpected peering outages.
Implementing and Operating Cisco Service Provider Network Core Technologies (SPCOR) (350-501) Practice Tests