Question 420
After Starlight IP Services deploys MAP-T stateless access translation to use algorithmic IPv4-to-IPv6 translation in an access service without centralized state, the primary acceptance check passes (the assigned IPv4 address and port set map predictably into IPv6 transport). What remaining operational risk should still be part of the design review?
- NAT state and port exhaustion can restrict subscriber scale.
- Propagation policies must permit communities to cross intended peers.
- Route-policy order can shadow more specific conditions.
- Port-set sharing restricts subscriber port availability.
Explanation
Correct Answer
D:The relevant boundary of MAP-T stateless access translation is that port-set sharing restricts subscriber port availability. Passing the acceptance test does not eliminate this residual operational risk.
Incorrect Answers
A:This concern applies to CGNAT address sharing logging in a different scenario where operators need to serve multiple IPv4 subscribers from shared public address resources. For the deployed MAP-T stateless access translation approach, the relevant caution is instead that port-set sharing restricts subscriber port availability.
B:This concern applies to BGP community tagging policy in a different scenario where operators need to identify a class of routes consistently across multiple policy boundaries. For the deployed MAP-T stateless access translation approach, the relevant caution is instead that port-set sharing restricts subscriber port availability.
C:This concern applies to RPL inbound AS-path policy in a different scenario where operators need to reject untrusted routes with prohibited AS-path characteristics. For the deployed MAP-T stateless access translation approach, the relevant caution is instead that port-set sharing restricts subscriber port availability.
Question 421
Northstar Carrier must serve multiple IPv4 subscribers from shared public address resources. The operator is comparing several service-provider methods. Which design or control directly addresses that stated requirement?
- CGNAT address sharing logging
- DS-Lite IPv4 transport over IPv6
- OSPFv3 IPv6 routing
- BGP network statement origination
Explanation
Correct Answer
A:CGNAT address sharing logging matches this requirement: the team should deploy stateful carrier-grade NAT with accurate address-port allocation logging. A relevant outcome would be that sessions reach the Internet and logs map translated tuples back to subscribers.
Incorrect Answers
B:DS-Lite IPv4 transport over IPv6 instead addresses a different condition: carry a subscriber IPv4 service over an IPv6-only access network. It would instead require you to tunnel subscriber IPv4 packets to a provider AFTR for IPv4 address translation, not the stated goal to serve multiple IPv4 subscribers from shared public address resources.
C:OSPFv3 IPv6 routing instead addresses a different condition: exchange IPv6 prefixes using the appropriate OSPF protocol version. It would instead require you to configure OSPFv3 address-family and interface participation for IPv6, not the stated goal to serve multiple IPv4 subscribers from shared public address resources.
D:BGP network statement origination instead addresses a different condition: advertise a local prefix only when a matching route exists in the local table. It would instead require you to configure BGP network origination for an exact eligible route, not the stated goal to serve multiple IPv4 subscribers from shared public address resources.
Question 422
At Orion Transit, the engineering change is approved for CGNAT address sharing logging. The specific goal is to serve multiple IPv4 subscribers from shared public address resources. Which implementation step belongs in this change plan?
- Tunnel subscriber IPv4 packets to a provider AFTR for IPv4 address translation.
- Deploy stateful carrier-grade NAT with accurate address-port allocation logging.
- Configure OSPFv3 address-family and interface participation for IPv6.
- Configure BGP network origination for an exact eligible route.
Explanation
Correct Answer
B:Implementing CGNAT address sharing logging requires the operator to deploy stateful carrier-grade NAT with accurate address-port allocation logging. This makes the required goal testable using evidence that sessions reach the Internet and logs map translated tuples back to subscribers.
Incorrect Answers
A:The proposed step is for DS-Lite IPv4 transport over IPv6, whose purpose is to carry a subscriber IPv4 service over an IPv6-only access network. It would not perform the necessary CGNAT address sharing logging operation: deploy stateful carrier-grade NAT with accurate address-port allocation logging.
C:The proposed step is for OSPFv3 IPv6 routing, whose purpose is to exchange IPv6 prefixes using the appropriate OSPF protocol version. It would not perform the necessary CGNAT address sharing logging operation: deploy stateful carrier-grade NAT with accurate address-port allocation logging.
D:The proposed step is for BGP network statement origination, whose purpose is to advertise a local prefix only when a matching route exists in the local table. It would not perform the necessary CGNAT address sharing logging operation: deploy stateful carrier-grade NAT with accurate address-port allocation logging.
Question 423
Meridian Networks has deployed CGNAT address sharing logging to serve multiple IPv4 subscribers from shared public address resources. The implementation step was to deploy stateful carrier-grade NAT with accurate address-port allocation logging. Which observation demonstrates that the requested service is working?
- IPv4 applications work through the IPv6 access link and AFTR service.
- OSPFv3 neighbors form and IPv6 prefixes install into the routing table.
- Sessions reach the Internet and logs map translated tuples back to subscribers.
- The BGP table contains a locally originated path for the intended prefix.
Explanation
Correct Answer
C:For CGNAT address sharing logging, successful verification means that sessions reach the Internet and logs map translated tuples back to subscribers. That evidence directly tests whether the provider can serve multiple IPv4 subscribers from shared public address resources after deployment.
Incorrect Answers
A:The observation would verify DS-Lite IPv4 transport over IPv6 under the separate requirement to carry a subscriber IPv4 service over an IPv6-only access network. It does not demonstrate the needed CGNAT address sharing logging result: sessions reach the Internet and logs map translated tuples back to subscribers.
B:The observation would verify OSPFv3 IPv6 routing under the separate requirement to exchange IPv6 prefixes using the appropriate OSPF protocol version. It does not demonstrate the needed CGNAT address sharing logging result: sessions reach the Internet and logs map translated tuples back to subscribers.
D:The observation would verify BGP network statement origination under the separate requirement to advertise a local prefix only when a matching route exists in the local table. It does not demonstrate the needed CGNAT address sharing logging result: sessions reach the Internet and logs map translated tuples back to subscribers.
Question 424
While troubleshooting CGNAT address sharing logging at Kestrel Broadband, the intended acceptance outcome is still missing: sessions reach the Internet and logs map translated tuples back to subscribers. Which fault condition should be investigated first for this particular design?
- NAT64 is substituted even though the client stack expects native IPv4 packets.
- OSPFv2-only adjacency is assumed to advertise IPv6 unicast routes.
- A network statement is entered but no matching route exists to originate.
- A shared source address is logged without ports or timestamps needed for attribution.
Explanation
Correct Answer
D:The suspected defect directly frustrates CGNAT address sharing logging: a shared source address is logged without ports or timestamps needed for attribution. Correcting it should allow verification that sessions reach the Internet and logs map translated tuples back to subscribers.
Incorrect Answers
A:This defect belongs to DS-Lite IPv4 transport over IPv6, where the affected outcome is to carry a subscriber IPv4 service over an IPv6-only access network. It is not the direct failure mode identified for the CGNAT address sharing logging design in this case: a shared source address is logged without ports or timestamps needed for attribution.
B:This defect belongs to OSPFv3 IPv6 routing, where the affected outcome is to exchange IPv6 prefixes using the appropriate OSPF protocol version. It is not the direct failure mode identified for the CGNAT address sharing logging design in this case: a shared source address is logged without ports or timestamps needed for attribution.
C:This defect belongs to BGP network statement origination, where the affected outcome is to advertise a local prefix only when a matching route exists in the local table. It is not the direct failure mode identified for the CGNAT address sharing logging design in this case: a shared source address is logged without ports or timestamps needed for attribution.
Question 425
After Harbor Metro deploys CGNAT address sharing logging to serve multiple IPv4 subscribers from shared public address resources, the primary acceptance check passes (sessions reach the Internet and logs map translated tuples back to subscribers). What remaining operational risk should still be part of the design review?
- NAT state and port exhaustion can restrict subscriber scale.
- AFTR placement and tunnel MTU can affect performance.
- Both peers must agree on instance and area context for adjacency.
- A lost underlying route can withdraw the BGP advertisement.
Explanation
Correct Answer
A:The relevant boundary of CGNAT address sharing logging is that NAT state and port exhaustion can restrict subscriber scale. Passing the acceptance test does not eliminate this residual operational risk.
Incorrect Answers
B:This concern applies to DS-Lite IPv4 transport over IPv6 in a different scenario where operators need to carry a subscriber IPv4 service over an IPv6-only access network. For the deployed CGNAT address sharing logging approach, the relevant caution is instead that NAT state and port exhaustion can restrict subscriber scale.
C:This concern applies to OSPFv3 IPv6 routing in a different scenario where operators need to exchange IPv6 prefixes using the appropriate OSPF protocol version. For the deployed CGNAT address sharing logging approach, the relevant caution is instead that NAT state and port exhaustion can restrict subscriber scale.
D:This concern applies to BGP network statement origination in a different scenario where operators need to advertise a local prefix only when a matching route exists in the local table. For the deployed CGNAT address sharing logging approach, the relevant caution is instead that NAT state and port exhaustion can restrict subscriber scale.
Question 426
Summit Service Provider must carry a subscriber IPv4 service over an IPv6-only access network. The operator is comparing several service-provider methods. Which design or control directly addresses that stated requirement?
- CGNAT address sharing logging
- DS-Lite IPv4 transport over IPv6
- RPL route policy execution order
- BGP remote AS alignment
Explanation
Correct Answer
B:DS-Lite IPv4 transport over IPv6 matches this requirement: the team should tunnel subscriber IPv4 packets to a provider AFTR for IPv4 address translation. A relevant outcome would be that IPv4 applications work through the IPv6 access link and AFTR service.
Incorrect Answers
A:CGNAT address sharing logging instead addresses a different condition: serve multiple IPv4 subscribers from shared public address resources. It would instead require you to deploy stateful carrier-grade NAT with accurate address-port allocation logging, not the stated goal to carry a subscriber IPv4 service over an IPv6-only access network.
C:RPL route policy execution order instead addresses a different condition: apply an explicit route reject before a broad default permit condition. It would instead require you to order route-policy clauses so the narrow deny is evaluated first, not the stated goal to carry a subscriber IPv4 service over an IPv6-only access network.
D:BGP remote AS alignment instead addresses a different condition: form an external BGP peering between provider and customer autonomous systems. It would instead require you to configure each peer with the other's correct remote AS and IP reachability, not the stated goal to carry a subscriber IPv4 service over an IPv6-only access network.
Question 427
At Ridgeway Networks, the engineering change is approved for DS-Lite IPv4 transport over IPv6. The specific goal is to carry a subscriber IPv4 service over an IPv6-only access network. Which implementation step belongs in this change plan?
- Deploy stateful carrier-grade NAT with accurate address-port allocation logging.
- Order route-policy clauses so the narrow deny is evaluated first.
- Tunnel subscriber IPv4 packets to a provider AFTR for IPv4 address translation.
- Configure each peer with the other's correct remote AS and IP reachability.
Explanation
Correct Answer
C:Implementing DS-Lite IPv4 transport over IPv6 requires the operator to tunnel subscriber IPv4 packets to a provider AFTR for IPv4 address translation. This makes the required goal testable using evidence that IPv4 applications work through the IPv6 access link and AFTR service.
Incorrect Answers
A:The proposed step is for CGNAT address sharing logging, whose purpose is to serve multiple IPv4 subscribers from shared public address resources. It would not perform the necessary DS-Lite IPv4 transport over IPv6 operation: tunnel subscriber IPv4 packets to a provider AFTR for IPv4 address translation.
B:The proposed step is for RPL route policy execution order, whose purpose is to apply an explicit route reject before a broad default permit condition. It would not perform the necessary DS-Lite IPv4 transport over IPv6 operation: tunnel subscriber IPv4 packets to a provider AFTR for IPv4 address translation.
D:The proposed step is for BGP remote AS alignment, whose purpose is to form an external BGP peering between provider and customer autonomous systems. It would not perform the necessary DS-Lite IPv4 transport over IPv6 operation: tunnel subscriber IPv4 packets to a provider AFTR for IPv4 address translation.
Question 428
Lakeside Transport has deployed DS-Lite IPv4 transport over IPv6 to carry a subscriber IPv4 service over an IPv6-only access network. The implementation step was to tunnel subscriber IPv4 packets to a provider AFTR for IPv4 address translation. Which observation demonstrates that the requested service is working?
- Sessions reach the Internet and logs map translated tuples back to subscribers.
- The prohibited prefix is rejected while unrelated eligible routes pass.
- The BGP finite state machine reaches Established and routes exchange under policy.
- IPv4 applications work through the IPv6 access link and AFTR service.
Explanation
Correct Answer
D:For DS-Lite IPv4 transport over IPv6, successful verification means that IPv4 applications work through the IPv6 access link and AFTR service. That evidence directly tests whether the provider can carry a subscriber IPv4 service over an IPv6-only access network after deployment.
Incorrect Answers
A:The observation would verify CGNAT address sharing logging under the separate requirement to serve multiple IPv4 subscribers from shared public address resources. It does not demonstrate the needed DS-Lite IPv4 transport over IPv6 result: IPv4 applications work through the IPv6 access link and AFTR service.
B:The observation would verify RPL route policy execution order under the separate requirement to apply an explicit route reject before a broad default permit condition. It does not demonstrate the needed DS-Lite IPv4 transport over IPv6 result: IPv4 applications work through the IPv6 access link and AFTR service.
C:The observation would verify BGP remote AS alignment under the separate requirement to form an external BGP peering between provider and customer autonomous systems. It does not demonstrate the needed DS-Lite IPv4 transport over IPv6 result: IPv4 applications work through the IPv6 access link and AFTR service.
Question 429
While troubleshooting DS-Lite IPv4 transport over IPv6 at Coastal Communications, the intended acceptance outcome is still missing: IPv4 applications work through the IPv6 access link and AFTR service. Which fault condition should be investigated first for this particular design?
- NAT64 is substituted even though the client stack expects native IPv4 packets.
- A shared source address is logged without ports or timestamps needed for attribution.
- A broad pass condition precedes the deny so the prohibition never executes.
- A neighbor is configured with the provider's local AS instead of the customer AS.
Explanation
Correct Answer
A:The suspected defect directly frustrates DS-Lite IPv4 transport over IPv6: NAT64 is substituted even though the client stack expects native IPv4 packets. Correcting it should allow verification that IPv4 applications work through the IPv6 access link and AFTR service.
Incorrect Answers
B:This defect belongs to CGNAT address sharing logging, where the affected outcome is to serve multiple IPv4 subscribers from shared public address resources. It is not the direct failure mode identified for the DS-Lite IPv4 transport over IPv6 design in this case: NAT64 is substituted even though the client stack expects native IPv4 packets.
C:This defect belongs to RPL route policy execution order, where the affected outcome is to apply an explicit route reject before a broad default permit condition. It is not the direct failure mode identified for the DS-Lite IPv4 transport over IPv6 design in this case: NAT64 is substituted even though the client stack expects native IPv4 packets.
D:This defect belongs to BGP remote AS alignment, where the affected outcome is to form an external BGP peering between provider and customer autonomous systems. It is not the direct failure mode identified for the DS-Lite IPv4 transport over IPv6 design in this case: NAT64 is substituted even though the client stack expects native IPv4 packets.
Question 430
After Bluebird Infrastructure deploys DS-Lite IPv4 transport over IPv6 to carry a subscriber IPv4 service over an IPv6-only access network, the primary acceptance check passes (IPv4 applications work through the IPv6 access link and AFTR service). What remaining operational risk should still be part of the design review?
- NAT state and port exhaustion can restrict subscriber scale.
- AFTR placement and tunnel MTU can affect performance.
- Policy ordering should be tested with representative matched and unmatched routes.
- EBGP policy and prefix filtering are still required after peering forms.
Explanation
Correct Answer
B:The relevant boundary of DS-Lite IPv4 transport over IPv6 is that AFTR placement and tunnel MTU can affect performance. Passing the acceptance test does not eliminate this residual operational risk.
Incorrect Answers
A:This concern applies to CGNAT address sharing logging in a different scenario where operators need to serve multiple IPv4 subscribers from shared public address resources. For the deployed DS-Lite IPv4 transport over IPv6 approach, the relevant caution is instead that AFTR placement and tunnel MTU can affect performance.
C:This concern applies to RPL route policy execution order in a different scenario where operators need to apply an explicit route reject before a broad default permit condition. For the deployed DS-Lite IPv4 transport over IPv6 approach, the relevant caution is instead that AFTR placement and tunnel MTU can affect performance.
D:This concern applies to BGP remote AS alignment in a different scenario where operators need to form an external BGP peering between provider and customer autonomous systems. For the deployed DS-Lite IPv4 transport over IPv6 approach, the relevant caution is instead that AFTR placement and tunnel MTU can affect performance.
Implementing and Operating Cisco Service Provider Network Core Technologies (SPCOR) (350-501) Practice Tests