Question 680
After Starlight IP Services deploys EVPN MAC mobility control to maintain forwarding when a customer virtual machine moves between EVPN access PEs, the primary acceptance check passes (remote sites converge on the latest legitimate MAC attachment point). What remaining operational risk should still be part of the design review?
- Per-VRF handoff scaling and operational overhead grow with service count.
- Application and switch support for IGMPv3 is required.
- Marking policy must handle untrusted subscriber-supplied values.
- Rapidly flapping customer MACs can still trigger mobility dampening.
Explanation
Correct Answer
D:The relevant boundary of EVPN MAC mobility control is that rapidly flapping customer MACs can still trigger mobility dampening. Passing the acceptance test does not eliminate this residual operational risk.
Incorrect Answers
A:This concern applies to inter-AS VPN option A separation in a different scenario where operators need to interconnect L3VPN sites across two providers without sharing their internal VPNv4 BGP tables. For the deployed EVPN MAC mobility control approach, the relevant caution is instead that rapidly flapping customer MACs can still trigger mobility dampening.
B:This concern applies to IGMPv3 inclusion filtering in a different scenario where operators need to request multicast only from one specified source at the IPv4 receiver edge. For the deployed EVPN MAC mobility control approach, the relevant caution is instead that rapidly flapping customer MACs can still trigger mobility dampening.
C:This concern applies to DSCP class marking at ingress in a different scenario where operators need to mark customer traffic into a contracted provider forwarding class before queuing. For the deployed EVPN MAC mobility control approach, the relevant caution is instead that rapidly flapping customer MACs can still trigger mobility dampening.
Question 681
Northstar Carrier must interconnect L3VPN sites across two providers without sharing their internal VPNv4 BGP tables. The operator is comparing several service-provider methods. Which design or control directly addresses that stated requirement?
- inter-AS VPN option A separation
- EVPN route target matching
- PIM-SM shared tree initial join
- shared extranet route import
Explanation
Correct Answer
A:inter-AS VPN option A separation matches this requirement: the team should exchange isolated VRF routes over explicit per-VRF handoff subinterfaces. A relevant outcome would be that customer connectivity works while each AS keeps its own VPN control plane.
Incorrect Answers
B:EVPN route target matching instead addresses a different condition: restrict the import of BGP EVPN routes to the correct tenant service. It would instead require you to configure the intended import/export route target set for each EVI, not the stated goal to interconnect L3VPN sites across two providers without sharing their internal VPNv4 BGP tables.
C:PIM-SM shared tree initial join instead addresses a different condition: provide multicast to sparse receivers through an RP-assisted distribution process. It would instead require you to configure PIM sparse mode and consistent rendezvous point reachability, not the stated goal to interconnect L3VPN sites across two providers without sharing their internal VPNv4 BGP tables.
D:shared extranet route import instead addresses a different condition: let only selected tenants reach a common internal service subnet. It would instead require you to create explicit selective route-target import or route-leak policies for the shared service, not the stated goal to interconnect L3VPN sites across two providers without sharing their internal VPNv4 BGP tables.
Question 682
At Orion Transit, the engineering change is approved for inter-AS VPN option A separation. The specific goal is to interconnect L3VPN sites across two providers without sharing their internal VPNv4 BGP tables. Which implementation step belongs in this change plan?
- Configure the intended import/export route target set for each EVI.
- Exchange isolated VRF routes over explicit per-VRF handoff subinterfaces.
- Configure PIM sparse mode and consistent rendezvous point reachability.
- Create explicit selective route-target import or route-leak policies for the shared service.
Explanation
Correct Answer
B:Implementing inter-AS VPN option A separation requires the operator to exchange isolated VRF routes over explicit per-VRF handoff subinterfaces. This makes the required goal testable using evidence that customer connectivity works while each AS keeps its own VPN control plane.
Incorrect Answers
A:The proposed step is for EVPN route target matching, whose purpose is to restrict the import of BGP EVPN routes to the correct tenant service. It would not perform the necessary inter-AS VPN option A separation operation: exchange isolated VRF routes over explicit per-VRF handoff subinterfaces.
C:The proposed step is for PIM-SM shared tree initial join, whose purpose is to provide multicast to sparse receivers through an RP-assisted distribution process. It would not perform the necessary inter-AS VPN option A separation operation: exchange isolated VRF routes over explicit per-VRF handoff subinterfaces.
D:The proposed step is for shared extranet route import, whose purpose is to let only selected tenants reach a common internal service subnet. It would not perform the necessary inter-AS VPN option A separation operation: exchange isolated VRF routes over explicit per-VRF handoff subinterfaces.
Question 683
Meridian Networks has deployed inter-AS VPN option A separation to interconnect L3VPN sites across two providers without sharing their internal VPNv4 BGP tables. The implementation step was to exchange isolated VRF routes over explicit per-VRF handoff subinterfaces. Which observation demonstrates that the requested service is working?
- Authorized routes appear only in the matching customer service tables.
- Receivers join the shared tree and traffic begins arriving through RP-based state.
- Customer connectivity works while each AS keeps its own VPN control plane.
- Authorized VRFs reach the shared prefix while unrelated VRFs remain isolated.
Explanation
Correct Answer
C:For inter-AS VPN option A separation, successful verification means that customer connectivity works while each AS keeps its own VPN control plane. That evidence directly tests whether the provider can interconnect L3VPN sites across two providers without sharing their internal VPNv4 BGP tables after deployment.
Incorrect Answers
A:The observation would verify EVPN route target matching under the separate requirement to restrict the import of BGP EVPN routes to the correct tenant service. It does not demonstrate the needed inter-AS VPN option A separation result: customer connectivity works while each AS keeps its own VPN control plane.
B:The observation would verify PIM-SM shared tree initial join under the separate requirement to provide multicast to sparse receivers through an RP-assisted distribution process. It does not demonstrate the needed inter-AS VPN option A separation result: customer connectivity works while each AS keeps its own VPN control plane.
D:The observation would verify shared extranet route import under the separate requirement to let only selected tenants reach a common internal service subnet. It does not demonstrate the needed inter-AS VPN option A separation result: customer connectivity works while each AS keeps its own VPN control plane.
Question 684
While troubleshooting inter-AS VPN option A separation at Kestrel Broadband, the intended acceptance outcome is still missing: customer connectivity works while each AS keeps its own VPN control plane. Which fault condition should be investigated first for this particular design?
- A foreign tenant EVI imports every received EVPN route without filtering.
- No RP is reachable but group joins are expected to create a shared tree.
- All customer routes are mutually imported to enable one shared application.
- One provider assumes VPN label transport is shared over a plain VRF interface.
Explanation
Correct Answer
D:The suspected defect directly frustrates inter-AS VPN option A separation: one provider assumes VPN label transport is shared over a plain VRF interface. Correcting it should allow verification that customer connectivity works while each AS keeps its own VPN control plane.
Incorrect Answers
A:This defect belongs to EVPN route target matching, where the affected outcome is to restrict the import of BGP EVPN routes to the correct tenant service. It is not the direct failure mode identified for the inter-AS VPN option A separation design in this case: one provider assumes VPN label transport is shared over a plain VRF interface.
B:This defect belongs to PIM-SM shared tree initial join, where the affected outcome is to provide multicast to sparse receivers through an RP-assisted distribution process. It is not the direct failure mode identified for the inter-AS VPN option A separation design in this case: one provider assumes VPN label transport is shared over a plain VRF interface.
C:This defect belongs to shared extranet route import, where the affected outcome is to let only selected tenants reach a common internal service subnet. It is not the direct failure mode identified for the inter-AS VPN option A separation design in this case: one provider assumes VPN label transport is shared over a plain VRF interface.
Question 685
After Harbor Metro deploys inter-AS VPN option A separation to interconnect L3VPN sites across two providers without sharing their internal VPNv4 BGP tables, the primary acceptance check passes (customer connectivity works while each AS keeps its own VPN control plane). What remaining operational risk should still be part of the design review?
- Per-VRF handoff scaling and operational overhead grow with service count.
- Incorrect route targets can leak connectivity between customer services.
- RP redundancy and RPF consistency influence multicast availability.
- Overly broad import policies break isolation and complicate return routing.
Explanation
Correct Answer
A:The relevant boundary of inter-AS VPN option A separation is that per-VRF handoff scaling and operational overhead grow with service count. Passing the acceptance test does not eliminate this residual operational risk.
Incorrect Answers
B:This concern applies to EVPN route target matching in a different scenario where operators need to restrict the import of BGP EVPN routes to the correct tenant service. For the deployed inter-AS VPN option A separation approach, the relevant caution is instead that per-VRF handoff scaling and operational overhead grow with service count.
C:This concern applies to PIM-SM shared tree initial join in a different scenario where operators need to provide multicast to sparse receivers through an RP-assisted distribution process. For the deployed inter-AS VPN option A separation approach, the relevant caution is instead that per-VRF handoff scaling and operational overhead grow with service count.
D:This concern applies to shared extranet route import in a different scenario where operators need to let only selected tenants reach a common internal service subnet. For the deployed inter-AS VPN option A separation approach, the relevant caution is instead that per-VRF handoff scaling and operational overhead grow with service count.
Question 686
Summit Service Provider must exchange labeled VPN routes between autonomous systems through AS border routers. The operator is comparing several service-provider methods. Which design or control directly addresses that stated requirement?
- EVPN MAC/IP route type 2
- inter-AS VPN option B route exchange
- 802.1ad Q-in-Q tag separation
- Y.1731 Ethernet delay measurement
Explanation
Correct Answer
B:inter-AS VPN option B route exchange matches this requirement: the team should establish ASBR VPNv4 route exchange and corresponding label handling. A relevant outcome would be that VPN reachability crosses the border with the expected labeled route entries.
Incorrect Answers
A:EVPN MAC/IP route type 2 instead addresses a different condition: advertise a reachable customer MAC address over a provider EVPN fabric. It would instead require you to enable MAC learning and Type-2 EVPN route advertisement for the correct service, not the stated goal to exchange labeled VPN routes between autonomous systems through AS border routers.
C:802.1ad Q-in-Q tag separation instead addresses a different condition: carry duplicate customer VLAN IDs from multiple subscribers over a provider Ethernet access network. It would instead require you to push a provider service VLAN tag while preserving each customer's C-tag, not the stated goal to exchange labeled VPN routes between autonomous systems through AS border routers.
D:Y.1731 Ethernet delay measurement instead addresses a different condition: measure frame delay and loss across a provisioned Ethernet service. It would instead require you to enable suitable service OAM performance measurement on supported MEPs, not the stated goal to exchange labeled VPN routes between autonomous systems through AS border routers.
Question 687
At Ridgeway Networks, the engineering change is approved for inter-AS VPN option B route exchange. The specific goal is to exchange labeled VPN routes between autonomous systems through AS border routers. Which implementation step belongs in this change plan?
- Enable MAC learning and Type-2 EVPN route advertisement for the correct service.
- Push a provider service VLAN tag while preserving each customer's C-tag.
- Establish ASBR VPNv4 route exchange and corresponding label handling.
- Enable suitable service OAM performance measurement on supported MEPs.
Explanation
Correct Answer
C:Implementing inter-AS VPN option B route exchange requires the operator to establish ASBR VPNv4 route exchange and corresponding label handling. This makes the required goal testable using evidence that VPN reachability crosses the border with the expected labeled route entries.
Incorrect Answers
A:The proposed step is for EVPN MAC/IP route type 2, whose purpose is to advertise a reachable customer MAC address over a provider EVPN fabric. It would not perform the necessary inter-AS VPN option B route exchange operation: establish ASBR VPNv4 route exchange and corresponding label handling.
B:The proposed step is for 802.1ad Q-in-Q tag separation, whose purpose is to carry duplicate customer VLAN IDs from multiple subscribers over a provider Ethernet access network. It would not perform the necessary inter-AS VPN option B route exchange operation: establish ASBR VPNv4 route exchange and corresponding label handling.
D:The proposed step is for Y.1731 Ethernet delay measurement, whose purpose is to measure frame delay and loss across a provisioned Ethernet service. It would not perform the necessary inter-AS VPN option B route exchange operation: establish ASBR VPNv4 route exchange and corresponding label handling.
Question 688
Lakeside Transport has deployed inter-AS VPN option B route exchange to exchange labeled VPN routes between autonomous systems through AS border routers. The implementation step was to establish ASBR VPNv4 route exchange and corresponding label handling. Which observation demonstrates that the requested service is working?
- Remote PEs learn the MAC via BGP EVPN and can forward to its advertising PE.
- Provider S-tag distinguishes the subscriber services independently of C-tag values.
- The provider obtains delay or frame-loss measurements for the contracted EVC.
- VPN reachability crosses the border with the expected labeled route entries.
Explanation
Correct Answer
D:For inter-AS VPN option B route exchange, successful verification means that VPN reachability crosses the border with the expected labeled route entries. That evidence directly tests whether the provider can exchange labeled VPN routes between autonomous systems through AS border routers after deployment.
Incorrect Answers
A:The observation would verify EVPN MAC/IP route type 2 under the separate requirement to advertise a reachable customer MAC address over a provider EVPN fabric. It does not demonstrate the needed inter-AS VPN option B route exchange result: VPN reachability crosses the border with the expected labeled route entries.
B:The observation would verify 802.1ad Q-in-Q tag separation under the separate requirement to carry duplicate customer VLAN IDs from multiple subscribers over a provider Ethernet access network. It does not demonstrate the needed inter-AS VPN option B route exchange result: VPN reachability crosses the border with the expected labeled route entries.
C:The observation would verify Y.1731 Ethernet delay measurement under the separate requirement to measure frame delay and loss across a provisioned Ethernet service. It does not demonstrate the needed inter-AS VPN option B route exchange result: VPN reachability crosses the border with the expected labeled route entries.
Question 689
While troubleshooting inter-AS VPN option B route exchange at Coastal Communications, the intended acceptance outcome is still missing: VPN reachability crosses the border with the expected labeled route entries. Which fault condition should be investigated first for this particular design?
- Only ordinary IPv4 unicast is exchanged without VPN identity information.
- Only an IP-prefix route is advertised and MAC reachability remains unknown.
- Customer C-tag alone is treated as globally unique across unrelated tenants.
- Physical link utilization is used as a substitute for per-service delay measurement.
Explanation
Correct Answer
A:The suspected defect directly frustrates inter-AS VPN option B route exchange: only ordinary IPv4 unicast is exchanged without VPN identity information. Correcting it should allow verification that VPN reachability crosses the border with the expected labeled route entries.
Incorrect Answers
B:This defect belongs to EVPN MAC/IP route type 2, where the affected outcome is to advertise a reachable customer MAC address over a provider EVPN fabric. It is not the direct failure mode identified for the inter-AS VPN option B route exchange design in this case: only ordinary IPv4 unicast is exchanged without VPN identity information.
C:This defect belongs to 802.1ad Q-in-Q tag separation, where the affected outcome is to carry duplicate customer VLAN IDs from multiple subscribers over a provider Ethernet access network. It is not the direct failure mode identified for the inter-AS VPN option B route exchange design in this case: only ordinary IPv4 unicast is exchanged without VPN identity information.
D:This defect belongs to Y.1731 Ethernet delay measurement, where the affected outcome is to measure frame delay and loss across a provisioned Ethernet service. It is not the direct failure mode identified for the inter-AS VPN option B route exchange design in this case: only ordinary IPv4 unicast is exchanged without VPN identity information.
Question 690
After Bluebird Infrastructure deploys inter-AS VPN option B route exchange to exchange labeled VPN routes between autonomous systems through AS border routers, the primary acceptance check passes (VPN reachability crosses the border with the expected labeled route entries). What remaining operational risk should still be part of the design review?
- Rapid MAC moves need dampening and loop-protection policy.
- ASBR trust and route-target filtering are critical at inter-provider edges.
- Link MTU must allow the additional Ethernet tag bytes.
- Measurement accuracy depends on platform clock and path support.
Explanation
Correct Answer
B:The relevant boundary of inter-AS VPN option B route exchange is that ASBR trust and route-target filtering are critical at inter-provider edges. Passing the acceptance test does not eliminate this residual operational risk.
Incorrect Answers
A:This concern applies to EVPN MAC/IP route type 2 in a different scenario where operators need to advertise a reachable customer MAC address over a provider EVPN fabric. For the deployed inter-AS VPN option B route exchange approach, the relevant caution is instead that ASBR trust and route-target filtering are critical at inter-provider edges.
C:This concern applies to 802.1ad Q-in-Q tag separation in a different scenario where operators need to carry duplicate customer VLAN IDs from multiple subscribers over a provider Ethernet access network. For the deployed inter-AS VPN option B route exchange approach, the relevant caution is instead that ASBR trust and route-target filtering are critical at inter-provider edges.
D:This concern applies to Y.1731 Ethernet delay measurement in a different scenario where operators need to measure frame delay and loss across a provisioned Ethernet service. For the deployed inter-AS VPN option B route exchange approach, the relevant caution is instead that ASBR trust and route-target filtering are critical at inter-provider edges.
Implementing and Operating Cisco Service Provider Network Core Technologies (SPCOR) (350-501) Practice Tests