Question 360
After Starlight IP Services deploys BGP route reflection loop prevention to stop reflected paths from looping among route reflectors, the primary acceptance check passes (paths with the local originator or reflector cluster are rejected as appropriate). What remaining operational risk should still be part of the design review?
- Reflector placement and redundancy shape convergence and path visibility.
- An MTU increase needs to be supported across the physical path.
- Policy ordering should be tested with representative matched and unmatched routes.
- Badly designed reflector clusters can hide alternative routes.
Explanation
Correct Answer
D:The relevant boundary of BGP route reflection loop prevention is that badly designed reflector clusters can hide alternative routes. Passing the acceptance test does not eliminate this residual operational risk.
Incorrect Answers
A:This concern applies to BGP route reflector scale in a different scenario where operators need to avoid a full mesh of iBGP peer sessions across a large provider AS. For the deployed BGP route reflection loop prevention approach, the relevant caution is instead that badly designed reflector clusters can hide alternative routes.
B:This concern applies to IS-IS adjacency MTU consistency in a different scenario where operators need to restore an IS-IS neighbor relationship failing due to mismatched interface MTUs. For the deployed BGP route reflection loop prevention approach, the relevant caution is instead that badly designed reflector clusters can hide alternative routes.
C:This concern applies to RPL route policy execution order in a different scenario where operators need to apply an explicit route reject before a broad default permit condition. For the deployed BGP route reflection loop prevention approach, the relevant caution is instead that badly designed reflector clusters can hide alternative routes.
Question 361
Northstar Carrier must protect a provider edge from a customer's sudden route-table explosion. The operator is comparing several service-provider methods. Which design or control directly addresses that stated requirement?
- BGP max-prefix protection
- BGP non-disruptive route refresh
- BFD cross-protocol fast detection
- BFD rapid peer failure detection
Explanation
Correct Answer
A:BGP max-prefix protection matches this requirement: the team should configure an appropriate maximum-prefix threshold and response for the neighbor. A relevant outcome would be that accepted route counts stay within the agreed limit and alerts trigger near it.
Incorrect Answers
B:BGP non-disruptive route refresh instead addresses a different condition: evaluate new inbound policy without resetting the full BGP TCP session. It would instead require you to use supported route-refresh behavior and soft route reevaluation, not the stated goal to protect a provider edge from a customer's sudden route-table explosion.
C:BFD cross-protocol fast detection instead addresses a different condition: provide a common rapid link-failure signal to multiple supported routing protocols. It would instead require you to establish BFD sessions and bind the required routing clients to them, not the stated goal to protect a provider edge from a customer's sudden route-table explosion.
D:BFD rapid peer failure detection instead addresses a different condition: detect forwarding failure more rapidly than ordinary routing hello timers. It would instead require you to bind supported BFD sessions to the appropriate routing neighbor, not the stated goal to protect a provider edge from a customer's sudden route-table explosion.
Question 362
At Orion Transit, the engineering change is approved for BGP max-prefix protection. The specific goal is to protect a provider edge from a customer's sudden route-table explosion. Which implementation step belongs in this change plan?
- Use supported route-refresh behavior and soft route reevaluation.
- Configure an appropriate maximum-prefix threshold and response for the neighbor.
- Establish BFD sessions and bind the required routing clients to them.
- Bind supported BFD sessions to the appropriate routing neighbor.
Explanation
Correct Answer
B:Implementing BGP max-prefix protection requires the operator to configure an appropriate maximum-prefix threshold and response for the neighbor. This makes the required goal testable using evidence that accepted route counts stay within the agreed limit and alerts trigger near it.
Incorrect Answers
A:The proposed step is for BGP non-disruptive route refresh, whose purpose is to evaluate new inbound policy without resetting the full BGP TCP session. It would not perform the necessary BGP max-prefix protection operation: configure an appropriate maximum-prefix threshold and response for the neighbor.
C:The proposed step is for BFD cross-protocol fast detection, whose purpose is to provide a common rapid link-failure signal to multiple supported routing protocols. It would not perform the necessary BGP max-prefix protection operation: configure an appropriate maximum-prefix threshold and response for the neighbor.
D:The proposed step is for BFD rapid peer failure detection, whose purpose is to detect forwarding failure more rapidly than ordinary routing hello timers. It would not perform the necessary BGP max-prefix protection operation: configure an appropriate maximum-prefix threshold and response for the neighbor.
Question 363
Meridian Networks has deployed BGP max-prefix protection to protect a provider edge from a customer's sudden route-table explosion. The implementation step was to configure an appropriate maximum-prefix threshold and response for the neighbor. Which observation demonstrates that the requested service is working?
- The accepted BGP route set reflects policy while peering remains Established.
- A forwarding loss transitions BFD Down and triggers the enrolled protocols.
- Accepted route counts stay within the agreed limit and alerts trigger near it.
- The BFD session tracks reachability and signals a failure promptly.
Explanation
Correct Answer
C:For BGP max-prefix protection, successful verification means that accepted route counts stay within the agreed limit and alerts trigger near it. That evidence directly tests whether the provider can protect a provider edge from a customer's sudden route-table explosion after deployment.
Incorrect Answers
A:The observation would verify BGP non-disruptive route refresh under the separate requirement to evaluate new inbound policy without resetting the full BGP TCP session. It does not demonstrate the needed BGP max-prefix protection result: accepted route counts stay within the agreed limit and alerts trigger near it.
B:The observation would verify BFD cross-protocol fast detection under the separate requirement to provide a common rapid link-failure signal to multiple supported routing protocols. It does not demonstrate the needed BGP max-prefix protection result: accepted route counts stay within the agreed limit and alerts trigger near it.
D:The observation would verify BFD rapid peer failure detection under the separate requirement to detect forwarding failure more rapidly than ordinary routing hello timers. It does not demonstrate the needed BGP max-prefix protection result: accepted route counts stay within the agreed limit and alerts trigger near it.
Question 364
While troubleshooting BGP max-prefix protection at Kestrel Broadband, the intended acceptance outcome is still missing: accepted route counts stay within the agreed limit and alerts trigger near it. Which fault condition should be investigated first for this particular design?
- The physical peer is administratively reset merely to apply a route filter.
- Interface counters are polled slowly while adjacency failover requires rapid detection.
- BGP keepalive timers alone are expected to detect subsecond forwarding loss.
- A customer advertises uncontrolled routes until the router runs short of memory.
Explanation
Correct Answer
D:The suspected defect directly frustrates BGP max-prefix protection: a customer advertises uncontrolled routes until the router runs short of memory. Correcting it should allow verification that accepted route counts stay within the agreed limit and alerts trigger near it.
Incorrect Answers
A:This defect belongs to BGP non-disruptive route refresh, where the affected outcome is to evaluate new inbound policy without resetting the full BGP TCP session. It is not the direct failure mode identified for the BGP max-prefix protection design in this case: a customer advertises uncontrolled routes until the router runs short of memory.
B:This defect belongs to BFD cross-protocol fast detection, where the affected outcome is to provide a common rapid link-failure signal to multiple supported routing protocols. It is not the direct failure mode identified for the BGP max-prefix protection design in this case: a customer advertises uncontrolled routes until the router runs short of memory.
C:This defect belongs to BFD rapid peer failure detection, where the affected outcome is to detect forwarding failure more rapidly than ordinary routing hello timers. It is not the direct failure mode identified for the BGP max-prefix protection design in this case: a customer advertises uncontrolled routes until the router runs short of memory.
Question 365
After Harbor Metro deploys BGP max-prefix protection to protect a provider edge from a customer's sudden route-table explosion, the primary acceptance check passes (accepted route counts stay within the agreed limit and alerts trigger near it). What remaining operational risk should still be part of the design review?
- Thresholds need allowance for normal growth and backup-route variation.
- Peer route-refresh capabilities and local policy semantics must be checked.
- BFD failure thresholds must be tuned to avoid flapping.
- Overly short timers can increase false alarms on busy devices.
Explanation
Correct Answer
A:The relevant boundary of BGP max-prefix protection is that thresholds need allowance for normal growth and backup-route variation. Passing the acceptance test does not eliminate this residual operational risk.
Incorrect Answers
B:This concern applies to BGP non-disruptive route refresh in a different scenario where operators need to evaluate new inbound policy without resetting the full BGP TCP session. For the deployed BGP max-prefix protection approach, the relevant caution is instead that thresholds need allowance for normal growth and backup-route variation.
C:This concern applies to BFD cross-protocol fast detection in a different scenario where operators need to provide a common rapid link-failure signal to multiple supported routing protocols. For the deployed BGP max-prefix protection approach, the relevant caution is instead that thresholds need allowance for normal growth and backup-route variation.
D:This concern applies to BFD rapid peer failure detection in a different scenario where operators need to detect forwarding failure more rapidly than ordinary routing hello timers. For the deployed BGP max-prefix protection approach, the relevant caution is instead that thresholds need allowance for normal growth and backup-route variation.
Question 366
Summit Service Provider must support overlapping customer AS numbers at separate CE sites under a controlled VPN design. The operator is comparing several service-provider methods. Which design or control directly addresses that stated requirement?
- BGP PIC backup forwarding
- BGP AS override customer overlap
- IS-IS IPv6 multitopology
- link aggregation member continuity
Explanation
Correct Answer
B:BGP AS override customer overlap matches this requirement: the team should apply permitted AS override on the correct PE-CE BGP relation. A relevant outcome would be that the remote CE accepts routes without rejecting its own AS in the modified path.
Incorrect Answers
A:BGP PIC backup forwarding instead addresses a different condition: maintain a programmed backup path for rapid edge failure response. It would instead require you to apply BGP PIC backup-path selection with the appropriate FIB programming, not the stated goal to support overlapping customer AS numbers at separate CE sites under a controlled VPN design.
C:IS-IS IPv6 multitopology instead addresses a different condition: advertise IPv6 links whose topology differs from the IPv4 forwarding graph. It would instead require you to enable the supported multitopology IS-IS IPv6 address-family behavior, not the stated goal to support overlapping customer AS numbers at separate CE sites under a controlled VPN design.
D:link aggregation member continuity instead addresses a different condition: retain a provider logical link when one physical member fails. It would instead require you to build a link bundle with compatible member settings and minimum-active policy, not the stated goal to support overlapping customer AS numbers at separate CE sites under a controlled VPN design.
Question 367
At Ridgeway Networks, the engineering change is approved for BGP AS override customer overlap. The specific goal is to support overlapping customer AS numbers at separate CE sites under a controlled VPN design. Which implementation step belongs in this change plan?
- Apply BGP PIC backup-path selection with the appropriate FIB programming.
- Enable the supported multitopology IS-IS IPv6 address-family behavior.
- Apply permitted AS override on the correct PE-CE BGP relation.
- Build a link bundle with compatible member settings and minimum-active policy.
Explanation
Correct Answer
C:Implementing BGP AS override customer overlap requires the operator to apply permitted AS override on the correct PE-CE BGP relation. This makes the required goal testable using evidence that the remote CE accepts routes without rejecting its own AS in the modified path.
Incorrect Answers
A:The proposed step is for BGP PIC backup forwarding, whose purpose is to maintain a programmed backup path for rapid edge failure response. It would not perform the necessary BGP AS override customer overlap operation: apply permitted AS override on the correct PE-CE BGP relation.
B:The proposed step is for IS-IS IPv6 multitopology, whose purpose is to advertise IPv6 links whose topology differs from the IPv4 forwarding graph. It would not perform the necessary BGP AS override customer overlap operation: apply permitted AS override on the correct PE-CE BGP relation.
D:The proposed step is for link aggregation member continuity, whose purpose is to retain a provider logical link when one physical member fails. It would not perform the necessary BGP AS override customer overlap operation: apply permitted AS override on the correct PE-CE BGP relation.
Question 368
Lakeside Transport has deployed BGP AS override customer overlap to support overlapping customer AS numbers at separate CE sites under a controlled VPN design. The implementation step was to apply permitted AS override on the correct PE-CE BGP relation. Which observation demonstrates that the requested service is working?
- The primary and backup forwarding paths are ready before link failure.
- IPv6 SPF sees its own valid link participation and reachability.
- Bundle remains operational and distributes traffic over surviving members.
- The remote CE accepts routes without rejecting its own AS in the modified path.
Explanation
Correct Answer
D:For BGP AS override customer overlap, successful verification means that the remote CE accepts routes without rejecting its own AS in the modified path. That evidence directly tests whether the provider can support overlapping customer AS numbers at separate CE sites under a controlled VPN design after deployment.
Incorrect Answers
A:The observation would verify BGP PIC backup forwarding under the separate requirement to maintain a programmed backup path for rapid edge failure response. It does not demonstrate the needed BGP AS override customer overlap result: the remote CE accepts routes without rejecting its own AS in the modified path.
B:The observation would verify IS-IS IPv6 multitopology under the separate requirement to advertise IPv6 links whose topology differs from the IPv4 forwarding graph. It does not demonstrate the needed BGP AS override customer overlap result: the remote CE accepts routes without rejecting its own AS in the modified path.
C:The observation would verify link aggregation member continuity under the separate requirement to retain a provider logical link when one physical member fails. It does not demonstrate the needed BGP AS override customer overlap result: the remote CE accepts routes without rejecting its own AS in the modified path.
Question 369
While troubleshooting BGP AS override customer overlap at Coastal Communications, the intended acceptance outcome is still missing: the remote CE accepts routes without rejecting its own AS in the modified path. Which fault condition should be investigated first for this particular design?
- Ordinary loop prevention drops a route because its own AS is present.
- Backup routes exist in control plane but no PIC backup is programmed in FIB.
- Single-topology IPv6 is forced through a link lacking IPv6 support.
- Individual ports are treated as independent L3 adjacencies despite one logical bundle.
Explanation
Correct Answer
A:The suspected defect directly frustrates BGP AS override customer overlap: ordinary loop prevention drops a route because its own AS is present. Correcting it should allow verification that the remote CE accepts routes without rejecting its own AS in the modified path.
Incorrect Answers
B:This defect belongs to BGP PIC backup forwarding, where the affected outcome is to maintain a programmed backup path for rapid edge failure response. It is not the direct failure mode identified for the BGP AS override customer overlap design in this case: ordinary loop prevention drops a route because its own AS is present.
C:This defect belongs to IS-IS IPv6 multitopology, where the affected outcome is to advertise IPv6 links whose topology differs from the IPv4 forwarding graph. It is not the direct failure mode identified for the BGP AS override customer overlap design in this case: ordinary loop prevention drops a route because its own AS is present.
D:This defect belongs to link aggregation member continuity, where the affected outcome is to retain a provider logical link when one physical member fails. It is not the direct failure mode identified for the BGP AS override customer overlap design in this case: ordinary loop prevention drops a route because its own AS is present.
Question 370
After Bluebird Infrastructure deploys BGP AS override customer overlap to support overlapping customer AS numbers at separate CE sites under a controlled VPN design, the primary acceptance check passes (the remote CE accepts routes without rejecting its own AS in the modified path). What remaining operational risk should still be part of the design review?
- The backup path still requires valid next-hop and adjacency resolution.
- AS override must be tightly scoped to avoid hidden routing loops.
- Multitopology requires consistent capabilities on intended neighbors.
- A surviving member may not provide the original aggregate capacity.
Explanation
Correct Answer
B:The relevant boundary of BGP AS override customer overlap is that AS override must be tightly scoped to avoid hidden routing loops. Passing the acceptance test does not eliminate this residual operational risk.
Incorrect Answers
A:This concern applies to BGP PIC backup forwarding in a different scenario where operators need to maintain a programmed backup path for rapid edge failure response. For the deployed BGP AS override customer overlap approach, the relevant caution is instead that AS override must be tightly scoped to avoid hidden routing loops.
C:This concern applies to IS-IS IPv6 multitopology in a different scenario where operators need to advertise IPv6 links whose topology differs from the IPv4 forwarding graph. For the deployed BGP AS override customer overlap approach, the relevant caution is instead that AS override must be tightly scoped to avoid hidden routing loops.
D:This concern applies to link aggregation member continuity in a different scenario where operators need to retain a provider logical link when one physical member fails. For the deployed BGP AS override customer overlap approach, the relevant caution is instead that AS override must be tightly scoped to avoid hidden routing loops.
Implementing and Operating Cisco Service Provider Network Core Technologies (SPCOR) (350-501) Practice Tests