Question 400
After Bluebird Infrastructure deploys BGP iBGP multipath forwarding to load-share among eligible equal-cost BGP routes instead of only one best path, the primary acceptance check passes (multiple eligible next hops appear in installed forwarding entries). What remaining operational risk should still be part of the design review?
- A lost underlying route can withdraw the BGP advertisement.
- Port-set sharing restricts subscriber port availability.
- Bad summaries can blackhole destinations absent from the actual aggregate.
- Not every path is eligible; AS-path and attribute equivalence rules apply.
Explanation
Correct Answer
D:The relevant boundary of BGP iBGP multipath forwarding is that not every path is eligible; AS-path and attribute equivalence rules apply. Passing the acceptance test does not eliminate this residual operational risk.
Incorrect Answers
A:This concern applies to BGP network statement origination in a different scenario where operators need to advertise a local prefix only when a matching route exists in the local table. For the deployed BGP iBGP multipath forwarding approach, the relevant caution is instead that not every path is eligible; AS-path and attribute equivalence rules apply.
B:This concern applies to MAP-T stateless access translation in a different scenario where operators need to use algorithmic IPv4-to-IPv6 translation in an access service without centralized state. For the deployed BGP iBGP multipath forwarding approach, the relevant caution is instead that not every path is eligible; AS-path and attribute equivalence rules apply.
C:This concern applies to OSPF route summarization in a different scenario where operators need to reduce inter-area LSA volume for contiguous customer prefixes. For the deployed BGP iBGP multipath forwarding approach, the relevant caution is instead that not every path is eligible; AS-path and attribute equivalence rules apply.
Question 401
Horizon Exchange must apply an explicit route reject before a broad default permit condition. The operator is comparing several service-provider methods. Which design or control directly addresses that stated requirement?
- RPL route policy execution order
- RPL inbound AS-path policy
- BGP prefix filtering
- BGP iBGP multipath forwarding
Explanation
Correct Answer
A:RPL route policy execution order matches this requirement: the team should order route-policy clauses so the narrow deny is evaluated first. A relevant outcome would be that the prohibited prefix is rejected while unrelated eligible routes pass.
Incorrect Answers
B:RPL inbound AS-path policy instead addresses a different condition: reject untrusted routes with prohibited AS-path characteristics. It would instead require you to attach the intended IOS XR route-policy to the BGP neighbor inbound address family, not the stated goal to apply an explicit route reject before a broad default permit condition.
C:BGP prefix filtering instead addresses a different condition: stop a customer's accidental broad route advertisement at the provider ingress. It would instead require you to attach a prefix-set based inbound routing policy with exact allowed subnets, not the stated goal to apply an explicit route reject before a broad default permit condition.
D:BGP iBGP multipath forwarding instead addresses a different condition: load-share among eligible equal-cost BGP routes instead of only one best path. It would instead require you to enable supported BGP multipath behavior within compatible path constraints, not the stated goal to apply an explicit route reject before a broad default permit condition.
Question 402
At Cedar Wireless, the engineering change is approved for RPL route policy execution order. The specific goal is to apply an explicit route reject before a broad default permit condition. Which implementation step belongs in this change plan?
- Attach the intended IOS XR route-policy to the BGP neighbor inbound address family.
- Order route-policy clauses so the narrow deny is evaluated first.
- Attach a prefix-set based inbound routing policy with exact allowed subnets.
- Enable supported BGP multipath behavior within compatible path constraints.
Explanation
Correct Answer
B:Implementing RPL route policy execution order requires the operator to order route-policy clauses so the narrow deny is evaluated first. This makes the required goal testable using evidence that the prohibited prefix is rejected while unrelated eligible routes pass.
Incorrect Answers
A:The proposed step is for RPL inbound AS-path policy, whose purpose is to reject untrusted routes with prohibited AS-path characteristics. It would not perform the necessary RPL route policy execution order operation: order route-policy clauses so the narrow deny is evaluated first.
C:The proposed step is for BGP prefix filtering, whose purpose is to stop a customer's accidental broad route advertisement at the provider ingress. It would not perform the necessary RPL route policy execution order operation: order route-policy clauses so the narrow deny is evaluated first.
D:The proposed step is for BGP iBGP multipath forwarding, whose purpose is to load-share among eligible equal-cost BGP routes instead of only one best path. It would not perform the necessary RPL route policy execution order operation: order route-policy clauses so the narrow deny is evaluated first.
Question 403
Willow Regional has deployed RPL route policy execution order to apply an explicit route reject before a broad default permit condition. The implementation step was to order route-policy clauses so the narrow deny is evaluated first. Which observation demonstrates that the requested service is working?
- The received route table excludes paths matching the denied condition.
- Only customer-authorized NLRI appear in the accepted BGP table.
- The prohibited prefix is rejected while unrelated eligible routes pass.
- Multiple eligible next hops appear in installed forwarding entries.
Explanation
Correct Answer
C:For RPL route policy execution order, successful verification means that the prohibited prefix is rejected while unrelated eligible routes pass. That evidence directly tests whether the provider can apply an explicit route reject before a broad default permit condition after deployment.
Incorrect Answers
A:The observation would verify RPL inbound AS-path policy under the separate requirement to reject untrusted routes with prohibited AS-path characteristics. It does not demonstrate the needed RPL route policy execution order result: the prohibited prefix is rejected while unrelated eligible routes pass.
B:The observation would verify BGP prefix filtering under the separate requirement to stop a customer's accidental broad route advertisement at the provider ingress. It does not demonstrate the needed RPL route policy execution order result: the prohibited prefix is rejected while unrelated eligible routes pass.
D:The observation would verify BGP iBGP multipath forwarding under the separate requirement to load-share among eligible equal-cost BGP routes instead of only one best path. It does not demonstrate the needed RPL route policy execution order result: the prohibited prefix is rejected while unrelated eligible routes pass.
Question 404
While troubleshooting RPL route policy execution order at Atlas Backbone, the intended acceptance outcome is still missing: the prohibited prefix is rejected while unrelated eligible routes pass. Which fault condition should be investigated first for this particular design?
- The policy is applied outbound and the prohibited path remains accepted.
- A matching outbound policy is applied instead of filtering received routes.
- Only one best route is programmed despite a requirement for multipath.
- A broad pass condition precedes the deny so the prohibition never executes.
Explanation
Correct Answer
D:The suspected defect directly frustrates RPL route policy execution order: a broad pass condition precedes the deny so the prohibition never executes. Correcting it should allow verification that the prohibited prefix is rejected while unrelated eligible routes pass.
Incorrect Answers
A:This defect belongs to RPL inbound AS-path policy, where the affected outcome is to reject untrusted routes with prohibited AS-path characteristics. It is not the direct failure mode identified for the RPL route policy execution order design in this case: a broad pass condition precedes the deny so the prohibition never executes.
B:This defect belongs to BGP prefix filtering, where the affected outcome is to stop a customer's accidental broad route advertisement at the provider ingress. It is not the direct failure mode identified for the RPL route policy execution order design in this case: a broad pass condition precedes the deny so the prohibition never executes.
C:This defect belongs to BGP iBGP multipath forwarding, where the affected outcome is to load-share among eligible equal-cost BGP routes instead of only one best path. It is not the direct failure mode identified for the RPL route policy execution order design in this case: a broad pass condition precedes the deny so the prohibition never executes.
Question 405
After Starlight IP Services deploys RPL route policy execution order to apply an explicit route reject before a broad default permit condition, the primary acceptance check passes (the prohibited prefix is rejected while unrelated eligible routes pass). What remaining operational risk should still be part of the design review?
- Policy ordering should be tested with representative matched and unmatched routes.
- Route-policy order can shadow more specific conditions.
- Prefix-set maintenance must track legitimate customer expansion.
- Not every path is eligible; AS-path and attribute equivalence rules apply.
Explanation
Correct Answer
A:The relevant boundary of RPL route policy execution order is that policy ordering should be tested with representative matched and unmatched routes. Passing the acceptance test does not eliminate this residual operational risk.
Incorrect Answers
B:This concern applies to RPL inbound AS-path policy in a different scenario where operators need to reject untrusted routes with prohibited AS-path characteristics. For the deployed RPL route policy execution order approach, the relevant caution is instead that policy ordering should be tested with representative matched and unmatched routes.
C:This concern applies to BGP prefix filtering in a different scenario where operators need to stop a customer's accidental broad route advertisement at the provider ingress. For the deployed RPL route policy execution order approach, the relevant caution is instead that policy ordering should be tested with representative matched and unmatched routes.
D:This concern applies to BGP iBGP multipath forwarding in a different scenario where operators need to load-share among eligible equal-cost BGP routes instead of only one best path. For the deployed RPL route policy execution order approach, the relevant caution is instead that policy ordering should be tested with representative matched and unmatched routes.
Question 406
Northstar Carrier must inject only selected IGP routes into BGP at an authorized boundary. The operator is comparing several service-provider methods. Which design or control directly addresses that stated requirement?
- RPL route policy execution order
- controlled IGP to BGP redistribution
- BGP local preference exit policy
- IS-IS wide metric scale
Explanation
Correct Answer
B:controlled IGP to BGP redistribution matches this requirement: the team should redistribute through a narrow route-policy rather than all learned IGP prefixes. A relevant outcome would be that the target BGP table contains only the documented permitted redistributed routes.
Incorrect Answers
A:RPL route policy execution order instead addresses a different condition: apply an explicit route reject before a broad default permit condition. It would instead require you to order route-policy clauses so the narrow deny is evaluated first, not the stated goal to inject only selected IGP routes into BGP at an authorized boundary.
C:BGP local preference exit policy instead addresses a different condition: make internal routers prefer one provider egress for outbound traffic. It would instead require you to set a higher BGP local preference on the preferred path within the AS, not the stated goal to inject only selected IGP routes into BGP at an authorized boundary.
D:IS-IS wide metric scale instead addresses a different condition: use traffic-engineering metric values beyond the narrow-metric limit. It would instead require you to enable supported wide-metric processing for the provider IS-IS domain, not the stated goal to inject only selected IGP routes into BGP at an authorized boundary.
Question 407
At Orion Transit, the engineering change is approved for controlled IGP to BGP redistribution. The specific goal is to inject only selected IGP routes into BGP at an authorized boundary. Which implementation step belongs in this change plan?
- Order route-policy clauses so the narrow deny is evaluated first.
- Set a higher BGP local preference on the preferred path within the AS.
- Redistribute through a narrow route-policy rather than all learned IGP prefixes.
- Enable supported wide-metric processing for the provider IS-IS domain.
Explanation
Correct Answer
C:Implementing controlled IGP to BGP redistribution requires the operator to redistribute through a narrow route-policy rather than all learned IGP prefixes. This makes the required goal testable using evidence that the target BGP table contains only the documented permitted redistributed routes.
Incorrect Answers
A:The proposed step is for RPL route policy execution order, whose purpose is to apply an explicit route reject before a broad default permit condition. It would not perform the necessary controlled IGP to BGP redistribution operation: redistribute through a narrow route-policy rather than all learned IGP prefixes.
B:The proposed step is for BGP local preference exit policy, whose purpose is to make internal routers prefer one provider egress for outbound traffic. It would not perform the necessary controlled IGP to BGP redistribution operation: redistribute through a narrow route-policy rather than all learned IGP prefixes.
D:The proposed step is for IS-IS wide metric scale, whose purpose is to use traffic-engineering metric values beyond the narrow-metric limit. It would not perform the necessary controlled IGP to BGP redistribution operation: redistribute through a narrow route-policy rather than all learned IGP prefixes.
Question 408
Meridian Networks has deployed controlled IGP to BGP redistribution to inject only selected IGP routes into BGP at an authorized boundary. The implementation step was to redistribute through a narrow route-policy rather than all learned IGP prefixes. Which observation demonstrates that the requested service is working?
- The prohibited prefix is rejected while unrelated eligible routes pass.
- IBGP routers prefer the agreed egress when policy applies.
- Neighbors accept the extended metric information and compute expected SPF.
- The target BGP table contains only the documented permitted redistributed routes.
Explanation
Correct Answer
D:For controlled IGP to BGP redistribution, successful verification means that the target BGP table contains only the documented permitted redistributed routes. That evidence directly tests whether the provider can inject only selected IGP routes into BGP at an authorized boundary after deployment.
Incorrect Answers
A:The observation would verify RPL route policy execution order under the separate requirement to apply an explicit route reject before a broad default permit condition. It does not demonstrate the needed controlled IGP to BGP redistribution result: the target BGP table contains only the documented permitted redistributed routes.
B:The observation would verify BGP local preference exit policy under the separate requirement to make internal routers prefer one provider egress for outbound traffic. It does not demonstrate the needed controlled IGP to BGP redistribution result: the target BGP table contains only the documented permitted redistributed routes.
C:The observation would verify IS-IS wide metric scale under the separate requirement to use traffic-engineering metric values beyond the narrow-metric limit. It does not demonstrate the needed controlled IGP to BGP redistribution result: the target BGP table contains only the documented permitted redistributed routes.
Question 409
While troubleshooting controlled IGP to BGP redistribution at Kestrel Broadband, the intended acceptance outcome is still missing: the target BGP table contains only the documented permitted redistributed routes. Which fault condition should be investigated first for this particular design?
- A broad redistribution rule leaks internal point-to-point infrastructure prefixes.
- A broad pass condition precedes the deny so the prohibition never executes.
- MED is adjusted expecting it to override a local-preference difference.
- A large metric is configured while peers process only narrow metric encoding.
Explanation
Correct Answer
A:The suspected defect directly frustrates controlled IGP to BGP redistribution: a broad redistribution rule leaks internal point-to-point infrastructure prefixes. Correcting it should allow verification that the target BGP table contains only the documented permitted redistributed routes.
Incorrect Answers
B:This defect belongs to RPL route policy execution order, where the affected outcome is to apply an explicit route reject before a broad default permit condition. It is not the direct failure mode identified for the controlled IGP to BGP redistribution design in this case: a broad redistribution rule leaks internal point-to-point infrastructure prefixes.
C:This defect belongs to BGP local preference exit policy, where the affected outcome is to make internal routers prefer one provider egress for outbound traffic. It is not the direct failure mode identified for the controlled IGP to BGP redistribution design in this case: a broad redistribution rule leaks internal point-to-point infrastructure prefixes.
D:This defect belongs to IS-IS wide metric scale, where the affected outcome is to use traffic-engineering metric values beyond the narrow-metric limit. It is not the direct failure mode identified for the controlled IGP to BGP redistribution design in this case: a broad redistribution rule leaks internal point-to-point infrastructure prefixes.
Question 410
After Harbor Metro deploys controlled IGP to BGP redistribution to inject only selected IGP routes into BGP at an authorized boundary, the primary acceptance check passes (the target BGP table contains only the documented permitted redistributed routes). What remaining operational risk should still be part of the design review?
- Policy ordering should be tested with representative matched and unmatched routes.
- Feedback between protocols can cause loops if the route origin is not tagged.
- Local preference is an internal-AS policy and not exported to eBGP peers.
- Mismatched metric styles can produce inconsistent path selection.
Explanation
Correct Answer
B:The relevant boundary of controlled IGP to BGP redistribution is that feedback between protocols can cause loops if the route origin is not tagged. Passing the acceptance test does not eliminate this residual operational risk.
Incorrect Answers
A:This concern applies to RPL route policy execution order in a different scenario where operators need to apply an explicit route reject before a broad default permit condition. For the deployed controlled IGP to BGP redistribution approach, the relevant caution is instead that feedback between protocols can cause loops if the route origin is not tagged.
C:This concern applies to BGP local preference exit policy in a different scenario where operators need to make internal routers prefer one provider egress for outbound traffic. For the deployed controlled IGP to BGP redistribution approach, the relevant caution is instead that feedback between protocols can cause loops if the route origin is not tagged.
D:This concern applies to IS-IS wide metric scale in a different scenario where operators need to use traffic-engineering metric values beyond the narrow-metric limit. For the deployed controlled IGP to BGP redistribution approach, the relevant caution is instead that feedback between protocols can cause loops if the route origin is not tagged.
Implementing and Operating Cisco Service Provider Network Core Technologies (SPCOR) (350-501) Practice Tests