Question 660
After Bluebird Infrastructure deploys EVPN single-active access design to make only one provider edge forward traffic for a protected customer Ethernet segment, the primary acceptance check passes (one active access PE forwards while backup takes over after failover). What remaining operational risk should still be part of the design review?
- Carrier-of-carrier design introduces inter-provider trust and scale constraints.
- Stateful firewall and return-path policies must match the breakout design.
- Overly broad import policies break isolation and complicate return routing.
- Failover convergence remains limited by Ethernet segment state timing.
Explanation
Correct Answer
D:The relevant boundary of EVPN single-active access design is that failover convergence remains limited by Ethernet segment state timing. Passing the acceptance test does not eliminate this residual operational risk.
Incorrect Answers
A:This concern applies to carrier supporting carrier VPN in a different scenario where operators need to let a carrier customer transport its own labeled VPN services over another carrier backbone. For the deployed EVPN single-active access design approach, the relevant caution is instead that failover convergence remains limited by Ethernet segment state timing.
B:This concern applies to controlled Internet breakout in a different scenario where operators need to provide Internet access for an L3VPN tenant without leaking private customer prefixes. For the deployed EVPN single-active access design approach, the relevant caution is instead that failover convergence remains limited by Ethernet segment state timing.
C:This concern applies to shared extranet route import in a different scenario where operators need to let only selected tenants reach a common internal service subnet. For the deployed EVPN single-active access design approach, the relevant caution is instead that failover convergence remains limited by Ethernet segment state timing.
Question 661
Horizon Exchange must advertise a reachable customer MAC address over a provider EVPN fabric. The operator is comparing several service-provider methods. Which design or control directly addresses that stated requirement?
- EVPN MAC/IP route type 2
- EVPN route target matching
- MPLS L3VPN label stack
- 802.1ah provider backbone bridging
Explanation
Correct Answer
A:EVPN MAC/IP route type 2 matches this requirement: the team should enable MAC learning and Type-2 EVPN route advertisement for the correct service. A relevant outcome would be that remote PEs learn the MAC via BGP EVPN and can forward to its advertising PE.
Incorrect Answers
B:EVPN route target matching instead addresses a different condition: restrict the import of BGP EVPN routes to the correct tenant service. It would instead require you to configure the intended import/export route target set for each EVI, not the stated goal to advertise a reachable customer MAC address over a provider EVPN fabric.
C:MPLS L3VPN label stack instead addresses a different condition: carry a VPN packet through a core that does not hold customer routes. It would instead require you to push a VPN service label beneath an appropriate transport label at the ingress PE, not the stated goal to advertise a reachable customer MAC address over a provider EVPN fabric.
D:802.1ah provider backbone bridging instead addresses a different condition: reduce provider core visibility into customer MAC addresses for a large Ethernet service. It would instead require you to apply PBB service encapsulation with backbone MAC and service identifiers where supported, not the stated goal to advertise a reachable customer MAC address over a provider EVPN fabric.
Question 662
At Cedar Wireless, the engineering change is approved for EVPN MAC/IP route type 2. The specific goal is to advertise a reachable customer MAC address over a provider EVPN fabric. Which implementation step belongs in this change plan?
- Configure the intended import/export route target set for each EVI.
- Enable MAC learning and Type-2 EVPN route advertisement for the correct service.
- Push a VPN service label beneath an appropriate transport label at the ingress PE.
- Apply PBB service encapsulation with backbone MAC and service identifiers where supported.
Explanation
Correct Answer
B:Implementing EVPN MAC/IP route type 2 requires the operator to enable MAC learning and Type-2 EVPN route advertisement for the correct service. This makes the required goal testable using evidence that remote PEs learn the MAC via BGP EVPN and can forward to its advertising PE.
Incorrect Answers
A:The proposed step is for EVPN route target matching, whose purpose is to restrict the import of BGP EVPN routes to the correct tenant service. It would not perform the necessary EVPN MAC/IP route type 2 operation: enable MAC learning and Type-2 EVPN route advertisement for the correct service.
C:The proposed step is for MPLS L3VPN label stack, whose purpose is to carry a VPN packet through a core that does not hold customer routes. It would not perform the necessary EVPN MAC/IP route type 2 operation: enable MAC learning and Type-2 EVPN route advertisement for the correct service.
D:The proposed step is for 802.1ah provider backbone bridging, whose purpose is to reduce provider core visibility into customer MAC addresses for a large Ethernet service. It would not perform the necessary EVPN MAC/IP route type 2 operation: enable MAC learning and Type-2 EVPN route advertisement for the correct service.
Question 663
Willow Regional has deployed EVPN MAC/IP route type 2 to advertise a reachable customer MAC address over a provider EVPN fabric. The implementation step was to enable MAC learning and Type-2 EVPN route advertisement for the correct service. Which observation demonstrates that the requested service is working?
- Authorized routes appear only in the matching customer service tables.
- Core P routers switch transport labels and egress PE selects the customer VRF.
- Remote PEs learn the MAC via BGP EVPN and can forward to its advertising PE.
- The core switches backbone encapsulation while customer identities stay at the edge.
Explanation
Correct Answer
C:For EVPN MAC/IP route type 2, successful verification means that remote PEs learn the MAC via BGP EVPN and can forward to its advertising PE. That evidence directly tests whether the provider can advertise a reachable customer MAC address over a provider EVPN fabric after deployment.
Incorrect Answers
A:The observation would verify EVPN route target matching under the separate requirement to restrict the import of BGP EVPN routes to the correct tenant service. It does not demonstrate the needed EVPN MAC/IP route type 2 result: remote PEs learn the MAC via BGP EVPN and can forward to its advertising PE.
B:The observation would verify MPLS L3VPN label stack under the separate requirement to carry a VPN packet through a core that does not hold customer routes. It does not demonstrate the needed EVPN MAC/IP route type 2 result: remote PEs learn the MAC via BGP EVPN and can forward to its advertising PE.
D:The observation would verify 802.1ah provider backbone bridging under the separate requirement to reduce provider core visibility into customer MAC addresses for a large Ethernet service. It does not demonstrate the needed EVPN MAC/IP route type 2 result: remote PEs learn the MAC via BGP EVPN and can forward to its advertising PE.
Question 664
While troubleshooting EVPN MAC/IP route type 2 at Atlas Backbone, the intended acceptance outcome is still missing: remote PEs learn the MAC via BGP EVPN and can forward to its advertising PE. Which fault condition should be investigated first for this particular design?
- A foreign tenant EVI imports every received EVPN route without filtering.
- Customer IP prefixes are installed in every P router instead of using labeled VPN transport.
- The provider core learns every subscriber MAC despite planned PBB isolation.
- Only an IP-prefix route is advertised and MAC reachability remains unknown.
Explanation
Correct Answer
D:The suspected defect directly frustrates EVPN MAC/IP route type 2: only an IP-prefix route is advertised and MAC reachability remains unknown. Correcting it should allow verification that remote PEs learn the MAC via BGP EVPN and can forward to its advertising PE.
Incorrect Answers
A:This defect belongs to EVPN route target matching, where the affected outcome is to restrict the import of BGP EVPN routes to the correct tenant service. It is not the direct failure mode identified for the EVPN MAC/IP route type 2 design in this case: only an IP-prefix route is advertised and MAC reachability remains unknown.
B:This defect belongs to MPLS L3VPN label stack, where the affected outcome is to carry a VPN packet through a core that does not hold customer routes. It is not the direct failure mode identified for the EVPN MAC/IP route type 2 design in this case: only an IP-prefix route is advertised and MAC reachability remains unknown.
C:This defect belongs to 802.1ah provider backbone bridging, where the affected outcome is to reduce provider core visibility into customer MAC addresses for a large Ethernet service. It is not the direct failure mode identified for the EVPN MAC/IP route type 2 design in this case: only an IP-prefix route is advertised and MAC reachability remains unknown.
Question 665
After Starlight IP Services deploys EVPN MAC/IP route type 2 to advertise a reachable customer MAC address over a provider EVPN fabric, the primary acceptance check passes (remote PEs learn the MAC via BGP EVPN and can forward to its advertising PE). What remaining operational risk should still be part of the design review?
- Rapid MAC moves need dampening and loop-protection policy.
- Incorrect route targets can leak connectivity between customer services.
- Label resolution and egress service state are both required for delivery.
- Edge encapsulation points and service ID mapping require consistent configuration.
Explanation
Correct Answer
A:The relevant boundary of EVPN MAC/IP route type 2 is that rapid MAC moves need dampening and loop-protection policy. Passing the acceptance test does not eliminate this residual operational risk.
Incorrect Answers
B:This concern applies to EVPN route target matching in a different scenario where operators need to restrict the import of BGP EVPN routes to the correct tenant service. For the deployed EVPN MAC/IP route type 2 approach, the relevant caution is instead that rapid MAC moves need dampening and loop-protection policy.
C:This concern applies to MPLS L3VPN label stack in a different scenario where operators need to carry a VPN packet through a core that does not hold customer routes. For the deployed EVPN MAC/IP route type 2 approach, the relevant caution is instead that rapid MAC moves need dampening and loop-protection policy.
D:This concern applies to 802.1ah provider backbone bridging in a different scenario where operators need to reduce provider core visibility into customer MAC addresses for a large Ethernet service. For the deployed EVPN MAC/IP route type 2 approach, the relevant caution is instead that rapid MAC moves need dampening and loop-protection policy.
Question 666
Northstar Carrier must advertise an IP prefix through a routed EVPN service without relying solely on individual MAC advertisements. The operator is comparing several service-provider methods. Which design or control directly addresses that stated requirement?
- EVPN route target matching
- EVPN IP prefix type 5
- L3VPN overlapping subnet migration
- VRF customer routing isolation
Explanation
Correct Answer
B:EVPN IP prefix type 5 matches this requirement: the team should use supported EVPN IP prefix route advertisement with the correct VRF mapping. A relevant outcome would be that remote PEs install the Type-5 prefix into the intended routing context.
Incorrect Answers
A:EVPN route target matching instead addresses a different condition: restrict the import of BGP EVPN routes to the correct tenant service. It would instead require you to configure the intended import/export route target set for each EVI, not the stated goal to advertise an IP prefix through a routed EVPN service without relying solely on individual MAC advertisements.
C:L3VPN overlapping subnet migration instead addresses a different condition: move a customer site to a new PE while another tenant uses the same IP block. It would instead require you to retain unique VRF and RD identities during the CE handoff change, not the stated goal to advertise an IP prefix through a routed EVPN service without relying solely on individual MAC advertisements.
D:VRF customer routing isolation instead addresses a different condition: prevent two subscribers with overlapping private addresses from mixing their forwarding routes. It would instead require you to create separate VRFs and bind the correct customer interfaces to each table, not the stated goal to advertise an IP prefix through a routed EVPN service without relying solely on individual MAC advertisements.
Question 667
At Orion Transit, the engineering change is approved for EVPN IP prefix type 5. The specific goal is to advertise an IP prefix through a routed EVPN service without relying solely on individual MAC advertisements. Which implementation step belongs in this change plan?
- Configure the intended import/export route target set for each EVI.
- Retain unique VRF and RD identities during the CE handoff change.
- Use supported EVPN IP prefix route advertisement with the correct VRF mapping.
- Create separate VRFs and bind the correct customer interfaces to each table.
Explanation
Correct Answer
C:Implementing EVPN IP prefix type 5 requires the operator to use supported EVPN IP prefix route advertisement with the correct VRF mapping. This makes the required goal testable using evidence that remote PEs install the Type-5 prefix into the intended routing context.
Incorrect Answers
A:The proposed step is for EVPN route target matching, whose purpose is to restrict the import of BGP EVPN routes to the correct tenant service. It would not perform the necessary EVPN IP prefix type 5 operation: use supported EVPN IP prefix route advertisement with the correct VRF mapping.
B:The proposed step is for L3VPN overlapping subnet migration, whose purpose is to move a customer site to a new PE while another tenant uses the same IP block. It would not perform the necessary EVPN IP prefix type 5 operation: use supported EVPN IP prefix route advertisement with the correct VRF mapping.
D:The proposed step is for VRF customer routing isolation, whose purpose is to prevent two subscribers with overlapping private addresses from mixing their forwarding routes. It would not perform the necessary EVPN IP prefix type 5 operation: use supported EVPN IP prefix route advertisement with the correct VRF mapping.
Question 668
Meridian Networks has deployed EVPN IP prefix type 5 to advertise an IP prefix through a routed EVPN service without relying solely on individual MAC advertisements. The implementation step was to use supported EVPN IP prefix route advertisement with the correct VRF mapping. Which observation demonstrates that the requested service is working?
- Authorized routes appear only in the matching customer service tables.
- The migrated site's VPN paths resolve without disrupting the unrelated tenant.
- The same IPv4 subnet can exist independently in both customer routing tables.
- Remote PEs install the Type-5 prefix into the intended routing context.
Explanation
Correct Answer
D:For EVPN IP prefix type 5, successful verification means that remote PEs install the Type-5 prefix into the intended routing context. That evidence directly tests whether the provider can advertise an IP prefix through a routed EVPN service without relying solely on individual MAC advertisements after deployment.
Incorrect Answers
A:The observation would verify EVPN route target matching under the separate requirement to restrict the import of BGP EVPN routes to the correct tenant service. It does not demonstrate the needed EVPN IP prefix type 5 result: remote PEs install the Type-5 prefix into the intended routing context.
B:The observation would verify L3VPN overlapping subnet migration under the separate requirement to move a customer site to a new PE while another tenant uses the same IP block. It does not demonstrate the needed EVPN IP prefix type 5 result: remote PEs install the Type-5 prefix into the intended routing context.
C:The observation would verify VRF customer routing isolation under the separate requirement to prevent two subscribers with overlapping private addresses from mixing their forwarding routes. It does not demonstrate the needed EVPN IP prefix type 5 result: remote PEs install the Type-5 prefix into the intended routing context.
Question 669
While troubleshooting EVPN IP prefix type 5 at Kestrel Broadband, the intended acceptance outcome is still missing: remote PEs install the Type-5 prefix into the intended routing context. Which fault condition should be investigated first for this particular design?
- A Type-2 MAC route alone is expected to advertise a complete IP aggregate.
- A foreign tenant EVI imports every received EVPN route without filtering.
- The shared prefix is leaked into the global routing table during migration.
- Both CE interfaces enter the global table and routes collide.
Explanation
Correct Answer
A:The suspected defect directly frustrates EVPN IP prefix type 5: a Type-2 MAC route alone is expected to advertise a complete IP aggregate. Correcting it should allow verification that remote PEs install the Type-5 prefix into the intended routing context.
Incorrect Answers
B:This defect belongs to EVPN route target matching, where the affected outcome is to restrict the import of BGP EVPN routes to the correct tenant service. It is not the direct failure mode identified for the EVPN IP prefix type 5 design in this case: a Type-2 MAC route alone is expected to advertise a complete IP aggregate.
C:This defect belongs to L3VPN overlapping subnet migration, where the affected outcome is to move a customer site to a new PE while another tenant uses the same IP block. It is not the direct failure mode identified for the EVPN IP prefix type 5 design in this case: a Type-2 MAC route alone is expected to advertise a complete IP aggregate.
D:This defect belongs to VRF customer routing isolation, where the affected outcome is to prevent two subscribers with overlapping private addresses from mixing their forwarding routes. It is not the direct failure mode identified for the EVPN IP prefix type 5 design in this case: a Type-2 MAC route alone is expected to advertise a complete IP aggregate.
Question 670
After Harbor Metro deploys EVPN IP prefix type 5 to advertise an IP prefix through a routed EVPN service without relying solely on individual MAC advertisements, the primary acceptance check passes (remote PEs install the Type-5 prefix into the intended routing context). What remaining operational risk should still be part of the design review?
- Incorrect route targets can leak connectivity between customer services.
- Route-target and next-hop resolution remain prerequisites.
- Temporary duplicate site advertisements require careful route preference.
- Intentional shared services require explicit route-leak controls.
Explanation
Correct Answer
B:The relevant boundary of EVPN IP prefix type 5 is that route-target and next-hop resolution remain prerequisites. Passing the acceptance test does not eliminate this residual operational risk.
Incorrect Answers
A:This concern applies to EVPN route target matching in a different scenario where operators need to restrict the import of BGP EVPN routes to the correct tenant service. For the deployed EVPN IP prefix type 5 approach, the relevant caution is instead that route-target and next-hop resolution remain prerequisites.
C:This concern applies to L3VPN overlapping subnet migration in a different scenario where operators need to move a customer site to a new PE while another tenant uses the same IP block. For the deployed EVPN IP prefix type 5 approach, the relevant caution is instead that route-target and next-hop resolution remain prerequisites.
D:This concern applies to VRF customer routing isolation in a different scenario where operators need to prevent two subscribers with overlapping private addresses from mixing their forwarding routes. For the deployed EVPN IP prefix type 5 approach, the relevant caution is instead that route-target and next-hop resolution remain prerequisites.
Implementing and Operating Cisco Service Provider Network Core Technologies (SPCOR) (350-501) Practice Tests